Notification channels
Signed webhooks (JSON)
Every alert and inventory change as HMAC-signed JSON, for your SIEM or scripts.
What the connector does
A JSON webhook receives the project's events: CVE alerts, CVE now exploited, end of life, certificates. Each call is signed with HMAC-SHA256 and retried on transient errors. An Inventory-type webhook also receives the inventory.changed event on every stack change.
What comes into TechWatchAlert
- CVE alerts: identifier, severity, CVSS and EPSS scores, PoC, KEV, tracked item
- The cve.exploitee event, once per CVE and per project
- End-of-life events and certificate status for monitored URLs
- The inventory.changed event, with components added and removed by GitHub, GitLab, an image, an inventory connector or an import
Setup
- On the project's Integrations page, add a webhook (name, URL, type)
- Copy the signing secret, shown only once
- Verify the X-TWA-Timestamp and X-TWA-Signature headers on the receiving side
In the same family
SlackUrgent alerts in your Slack channel, the rest in a daily digest.View connector →Microsoft TeamsYour alerts as Adaptive Cards in Teams, with one-click triage.View connector →DiscordMonitoring alerts in your Discord channel, urgent ones live and the rest in a digest.View connector →EmailUrgent alerts right away, the rest in a digest: everyone picks their pace and triages from the email.View connector →
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France