Skip to main content
Personal notification preferences can be found under Settings > Your Profile. Team Account Notification preferences (shared inboxes, Slack channels, and Teams channels) can be found under Settings > Notifications.

​
Overview

Wirespeed sends notifications to keep you informed about important activity in your account. Settings on this page fall into two areas:
  • Personal Notifications — which notification types you personally receive, and how often.
  • Team Account Notifications — shared inboxes, Slack channels, and Microsoft Teams channels for team-wide delivery.
By default, new users are subscribed to the standard notification types when their account is created. You can adjust personal preferences at any time on the Your Profile tab.

​
Delivery channels

​
Personal Notifications

The Personal Notifications card lists each notification type with a toggle and, where supported, a frequency dropdown.
  • Use the toggle to subscribe or unsubscribe from a type.
  • When subscribed, use the frequency dropdown to choose Real Time, Daily, or Weekly (where available).
As a service provider user, your subscriptions will automatically watch all of your client accounts.

​
Notification Types

​
New Case Escalation

A notification sent when a new case has been escalated in response to a detection. Case escalations are the primary way Wirespeed alerts you to security incidents that require your attention.
  • Default frequency: Real Time
  • Available frequencies: Real Time, Daily, Weekly
This is typically the most important notification to keep enabled. Escalated cases represent detections that Wirespeed has determined require human review or action.

​
New System Security Event

A notification sent when a security-relevant event occurs within your Wirespeed account. These are platform audit log events — not detection alerts from your integrated security tools. System security events help you monitor administrative and security-sensitive changes made to your Wirespeed account. Events that trigger this notification include:
  • User management — locking or unlocking a user account, deleting a user, changing a user’s role, unsubscribing a user from notifications
  • Credential changes — resetting a team member’s password, resetting multifactor authentication (MFA) credentials
  • Team administration — adding an operating team, resetting credentials for a user
You can review all system security events by selecting your email in the bottom left corner of the screen, and selecting “System Log”.
  • Default frequency: Real Time
  • Available frequencies: Real Time, Daily, Weekly

​
New Critical Defect

A notification sent when a critical defect has been identified in your cases. Critical defects are issues found by Wirespeed’s automated quality assurance checks that may affect the accuracy or completeness of your case analysis.
  • Frequency: Real Time (cannot be changed)

​
Integration Health

A notification sent when one of your integrations becomes unhealthy or unstable, or when a previously unhealthy integration recovers.
  • Frequency: Real Time (cannot be changed)

​
New Case Auto Contained

A notification sent when Wirespeed automatically contains a case in response to a detection, so the threat is handled without waiting for human action. The notification tells you which case was contained so you can review it.
  • Default frequency: Real Time
  • Available frequencies: Real Time, Daily, Weekly

​
Account & Billing

A notification sent for subscription and account events, including SKU requests and approvals, trial activation, trial reminders, and trial expiration. Service providers also receive new SKU requests from their client teams. New teams subscribe their first admin automatically so billing messages reach one point of contact. Other users can subscribe themselves.
  • Frequency: Real Time (cannot be changed)

​
Activity Summary

A recurring summary of activity in your account, including automatically closed cases, permission updates, and other routine events. This provides a periodic digest so you can stay informed without receiving individual notifications for each event.
  • Default frequency: Daily
  • Available frequencies: Daily, Weekly

​
Notification Frequency

Depending on the notification type, you can choose how often you receive notifications:
Some notification types have a fixed frequency. For example, New Critical Defect and Integration Health notifications are always sent in real time and cannot be changed to a daily or weekly cadence.
Frequency settings apply to email only. Slack and Teams channels receive every notification type they support in real time. Activity Summary is sent by email only.

​
Team Account Notifications

The Team Account Notifications card lets you route any notification type to one or more shared inboxes — ticketing systems, listservs, or other team email addresses. Each notification type has its own set of recipients, subject line, and formatting options.

​
Configuring a notification type

  1. Navigate to Settings > Notifications.
  2. Find the notification type you want to configure in the Team Account Notifications card.
  3. Click the gear icon (⚙) to open the configure dialog.
  4. Add one or more recipient email addresses. Up to ten addresses are supported per notification type.
  5. Optionally customize the subject line and toggle Rich HTML emails on or off.
  6. Click Save. Delivery is enabled automatically when at least one recipient is saved.

​
Enabling and disabling delivery

Use the toggle on each notification type row to enable or disable delivery to all configured inboxes at once.
  • If no recipients have been configured yet, turning the toggle on will open the configure dialog automatically.
  • Turning the toggle off suspends delivery without removing your recipient list.

​
Subject Line

You can provide a custom subject line for each notification type. Dynamically include case and detection values by typing a backtick ` and selecting the variable you want from the autocomplete list.
For service provider teams, default subject lines end with “for teamName” so recipients can immediately identify which client account the notification is about.

​
Rich HTML Emails

By default, notifications are sent as rich HTML emails. Disable this option for notification types going to ticketing systems or inboxes that display raw HTML as noise — plain-text emails integrate more cleanly with those tools.

​
Sending to Slack

The configure dialog also has a Slack Channel section. Turn on its switch and choose one or more of your team’s Slack channels, up to 10, to post that notification type as a message in Slack. Only admins can change the Slack channels for a notification type. Other users see the section read-only. An admin adds Slack channels first, with an incoming webhook created in a Slack app. See Slack channels.

​
Slack channels and the Slack integration

Wirespeed connects to Slack in two independent ways: You can use both.

​
Sending to Microsoft Teams

The configure dialog also has a Teams Channel section. Turn on its switch and choose one or more of your team’s Teams channels, up to 10, to post that notification type as a card in Teams. Only admins can change the Teams channels for a notification type. Other users see the section read-only. An admin adds Teams channels first, with a webhook created in Microsoft Teams. See Microsoft Teams channels.

​
Teams channels and the Microsoft Teams integration

Wirespeed connects to Microsoft Teams in two independent ways: You can use both.

​
Service provider behavior

If you are an SP user viewing a client team, the Team Account Notifications card shows that client team’s own inbox configuration, which you can manage on their behalf. Any changes you make will be reflected in the client team’s inbox configuration. To customize the shared behavior of all your client teams, switch back to your service provider team. Here, you can customize the email branding for all notification emails sent to your client teams: