Skip to main content
Notification preferences can be found under Settings > Notifications. From there, you can toggle each notification type on or off and configure the delivery frequency.

​
Overview

Wirespeed sends email notifications to keep you informed about important activity in your account. Settings on this page fall into two areas:
  • Personal Notifications — which notification types you receive, and how often (per user).
  • Email Settings — team-wide options for case escalation emails sent to a shared inbox (team inbox addresses, subject line, and rich vs. plain formatting).
By default, new users are subscribed to the standard notification types when their account is created. You can adjust personal preferences at any time on the Notifications tab on the Settings page.

​
Personal Notifications

The Personal Notifications card lists each notification type with a toggle and, where supported, a frequency dropdown.
  • Use the toggle to subscribe or unsubscribe from a type.
  • When subscribed, use the frequency dropdown to choose Real Time, Daily, or Weekly (where available).
Service provider users manage personal subscriptions from their service provider home team. Those settings apply across client accounts you manage, except for Activity Summary (which covers your provider account only). Internal Wirespeed users follow the active team context.

​
Notification Types

​
New Case Escalation

A notification sent when a new case has been escalated in response to a detection. Case escalations are the primary way Wirespeed alerts you to security incidents that require your attention.
  • Default frequency: Real Time
  • Available frequencies: Real Time, Daily, Weekly
This is typically the most important notification to keep enabled. Escalated cases represent detections that Wirespeed has determined require human review or action.

​
New System Security Event

A notification sent when a security-relevant event occurs within your Wirespeed account. These are platform audit log events — not detection alerts from your integrated security tools. System security events help you monitor administrative and security-sensitive changes made to your Wirespeed account. Events that trigger this notification include:
  • User management — locking or unlocking a user account, deleting a user, changing a user’s role, unsubscribing a user from notifications
  • Credential changes — resetting a team member’s password, resetting multifactor authentication (MFA) credentials
  • Team administration — adding an operating team, resetting credentials for a user
You can review all system security events by selecting your email in the bottom left corner of the screen, and selecting “System Log”.
  • Default frequency: Real Time
  • Available frequencies: Real Time, Daily, Weekly

​
New Critical Defect

A notification sent when a critical defect has been identified in your cases. Critical defects are issues found by Wirespeed’s automated quality assurance checks that may affect the accuracy or completeness of your case analysis.
  • Frequency: Real Time (cannot be changed)

​
Integration Health

A notification sent when one of your integrations becomes unhealthy or unstable, or when a previously unhealthy integration recovers.
  • Frequency: Real Time (cannot be changed)

​
Activity Summary

A recurring summary of activity in your account, including automatically closed cases, permission updates, and other routine events. This provides a periodic digest so you can stay informed without receiving individual notifications for each event.
  • Default frequency: Daily
  • Available frequencies: Daily, Weekly

​
Notification Frequency

Depending on the notification type, you can choose how often you receive notifications:
FrequencyDescription
Real TimeSent as soon as the event occurs (with a short delay for batching).
DailyAggregated and sent once per day.
WeeklyAggregated and sent once per week.
Some notification types have a fixed frequency. For example, New Critical Defect and Integration Health notifications are always sent in real time and cannot be changed to a daily or weekly cadence.

​
Team Email Settings

The Email Settings card configures how case escalation emails look when they are sent to a team inbox. These settings apply to shared inbox recipients, not to your personal user subscription.
  1. Navigate to Settings > Notifications.
  2. In the Notification Settings card, you will see each notification type with a toggle and frequency selector.
  3. Use the toggle to enable or disable a notification type.
  4. When a notification is enabled, use the frequency dropdown to choose how often you want to receive it (where available).

​
Team Inbox

Sometimes you may want to forward all escalations to a listserv, ticketing inbox, or other email address. Add one or more Team Inbox addresses to receive an email for each case that Wirespeed escalates, in addition to any users subscribed under Personal Notifications. You can add up to ten inbox addresses. Duplicate addresses are ignored automatically.

​
Subject Line

You can provide a subject line for case escalations that go to your team inbox. Dynamically include case and detection values by adding a backtick ` and selecting the value you want.
It’s important to remember a case can have multiple detections, and the escalation email fires only once, on case creation. If you select detection values in the subject line, later detections grouped into the same case will not trigger another email, and their values will not appear in the subject.

​
Rich Case Email Notifications

Allow Wirespeed to include the What Happened and Next Steps sections in case escalation emails sent to the team inbox. Rich formatting is only included for cases that contain a single detection.