Skip to main content
It’s a great idea to be sensitive to deploying anything that communicates with your workforce about security issues to avoid confusion or concern that Wirespeed ChatOps is unsafe and actually a bad guy. Here are some options that you have to do this:

Onboarding Group

Underneath the chat ops settings, you can enable an onboarding group. This will allow you to select what users you want to receive chat ops messages. We will only interact with these users while you are in the onboarding phase. You can search for users in bulk and select the add or remove buttons at the bottom of the dialog to add all matches, or select the 3-dot menu on each user to add or remove them.

SMS Chat Ops

All Wirespeed SMS communications will come from +1 (855) 627-0635
You can choose to send chat ops via SMS to increase responsiveness from your users. Due to FCC regulations every user in your organization must explicitly consent to receive SMS messages before we can message them.

How SMS Enrollment Works

After you enable SMS chat ops, Wirespeed automatically sends enrollment emails to eligible users:
  1. Invite emails are sent to users inviting them to enroll in SMS notifications
  2. Up to 3 attempts are made per user, with invites sent weekly
  3. Users who don’t respond after 3 attempts are marked as “Max Attempts” and will not receive further invites

Who Receives Invites

  • Only users with authentication activity in the last 30 days are invited
  • If you have an onboarding group enabled, only users in that group are invited
  • New eligible users are identified and automatically invited once a week
Before enabling SMS we suggest sending a preemptive rollout message so users expect the email and know it is not phishing.

SMS Enrollment Status

You can view each user’s SMS enrollment status on their detail page under Assets > Users. The status shows:
StatusMeaning
EnrolledUser has consented to receive SMS messages
Pending (X/3)Invite sent, awaiting response (shows attempt count)
Max Attempts3 invites sent without response
Opted OutUser declined SMS enrollment
Not InvitedNo invite has been sent yet

Resetting SMS Invites

If a user reaches “Max Attempts” but later wants to enroll, you can reset their invite status:
  1. Navigate to Assets > Users and select the user
  2. Click the Actions dropdown menu
  3. Select Reset SMS Invite
This resets their attempt counter to zero and immediately sends a new enrollment email.

On First Use Messages

Enabled by default, the “On First Use” messages give a short explanation about what Wirespeed is, like this:
Wirespeed is an application that keeps your company safe from hackers by occasionally asking you questions about you and your coworker’s activities. You can learn more about us here https://wirespeed.co and ask your security team for more information.
You may disable this message by selecting the Trash icon next to the text field.

Account Locked Messages

When a user’s account is locked in response to an actionable detection, they will receive a message like this:
Suspicious activity has been detected for your account which has caused us to reset your password and log you out of all active sessions. To regain access, please follow your company’s password reset instructions.
This message is required but may be customized underneath Settings > Chat Ops. It is recommended to add a link to your password reset instructions.

Initial Rate Limiting

It’s best to rollout new functionality in stages, to minimize any issues or confusion. Wirespeed allows you to set a limit on the number of chat ops messages per day, so you can introduce it in small chunks to your organization. Escalations to your security team are not subject to these rate limits.

Preemptive Rollout Messaging

It’s also a good idea to send an organization-wide message about rolling out Wirespeed, using the normal communication channels they would expect to see important updates, such as an organization-wide chat channel or official email address responsible for security or tech changes.​ Here’s an example template you could start from:
Hi Team, This is a quick note to let you know that we have started using a cybersecurity monitoring app called Wirespeed which will occasionally message you asking you questions about your online activity, such as logging in from unusual locations. To the best of your ability, please answer any questions from the app so we can all make sure to keep our organization safe from hackers and ransomware. Wirespeed’s goal is to be painless and only ask you when it matters. Please also note that Wirespeed will never ask you for sensitive information, like your password, bank account, or government ID numbers! A screenshot of an example Wirespeed message is below. Thanks and please let us know if you have any questions! - Security Team

Examples

Below are examples of what the user will receive in Slack, Microsoft Teams, Email, and SMS.

Initial Message

We will initially message the user through all available communication channels. Email, Slack, Teams, and SMS will redirect them to our website and go through the chat ops steps. Microsoft Teams will stay in app and display the chat ops steps in an iframe.

Chat Ops Steps

The user (or their manager) will receive a message with a brief summary of the security alert. If they select no, their account and endpoint will be locked, and they will be told to contact their IT department to unlock it. If they select yes, they will continue to step 2.

Service Provider ChatOps

Wirespeed allows you as a Service Provider to configure default Welcome, Subject Line, Message Signature, and Account Locked messaging for all of your client teams. Within your parent client, navigate to ChatOps and input the default values that you want. When you spin a client team, they will inherit these fields. They can override these fields at any time and can also reset to your original default should they wish to. Should you update the field in your parent team, all client teams that have not overriden your messaging will inherit your latest messaging.

FAQ

No. Due to FCC regulations, each user must provide their own phone number and give explicit consent to receive SMS messages. Administrators cannot manually add phone numbers on behalf of users. The user must complete the SMS enrollment process themselves by clicking the link in their enrollment email and entering their phone number.
Users must have authentication activity in the last 30 days to receive an SMS enrollment invite. If you have an onboarding group enabled, the user must also be in that group. New eligible users are automatically identified and invited once a week. Check the user’s SMS enrollment status under Assets > Users to see their current status.
Wirespeed sends up to 3 enrollment invites per user, with invites sent weekly. After 3 attempts without a response, the user is marked as “Max Attempts” and will not receive further automatic invites. You can manually reset their invite status from the user’s detail page.
All Wirespeed SMS communications are sent from +1 (855) 627-0635. You may want to share this with your team when rolling out SMS chat ops so they recognize the number.
Yes. Users can opt out of SMS at any time. Their status will change to “Opted Out” and they will no longer receive SMS messages. If the user later wants to re-enroll, they can contact their IT administrator to reset their SMS invite.
During a chat ops investigation, if a user indicates they don’t have access to their phone for MFA verification, Wirespeed will automatically escalate to their manager for verification instead.