Email notifications
AISafe sends you an email when something changes. It does not send an email to tell you that nothing has changed.
What you get
| When it arrives | |
|---|---|
| Assessment complete | An assessment finishes. The email gives the finding counts by severity and, for the free static analysis scan, how many findings are new since the last scan of that project. |
| Critical finding | A finding is rated critical. The email gives the finding's title, its severity and the project. |
| Report ready | A report finishes rendering. |
| Weekly digest | On Monday morning, one per organization, only if something moved. It lists new findings, resolved findings, what is still open, how many projects were scanned, up to five headline items, and when your next assessment is due. |
If a week has no new findings and no resolved findings, AISafe sends no digest.
What the messages contain
The emails contain counts, severities, finding titles, ids and links back to the dashboard. They never contain a finding's description, impact, remediation, proof of concept or source code. You can read those details only after you sign in.
Turning them off
Each of these emails has a link at the bottom that turns off that category of email without signing in. One click on the link changes only that one setting, and the other categories keep arriving.
You can also manage all of them under Settings → Notifications, where each category has its own toggle plus a master switch for email as a whole.
You cannot turn off password reset, email verification and team invitation emails, because they are part of using your account rather than announcements.
Sending to a shared inbox
An organization can route domain events to a shared mailbox alongside Slack and Microsoft Teams. Under Integrations → Chat notifications, pick the Email tab and add up to ten addresses.
Choose which events the inbox receives, and optionally set a severity floor. The floor applies to events about a single finding. For example, with a floor of "High and above", the inbox does not receive a notice about a medium finding. Events about a whole run, such as an assessment completing, always arrive, because they cover findings at every severity and a single severity threshold cannot decide whether to send them.