Skip to main content

​
Overview

ZeroPath integrates with Slack to send scan completion notifications and vulnerability alerts to your team’s channels. Configure which events trigger notifications and set score thresholds to control noise.

​
Setup

  1. Navigate to Settings → Integrations in the ZeroPath dashboard.
  2. Click Add Integration and select Slack.
  3. Authorize ZeroPath in the Slack consent screen.
  4. Go to Settings → Notifications, click Create New Setting, select Slack under Notification Channels, and pick the channels under Select Slack Channels.
The ZeroPath bot automatically joins public channels you select. For private channels, you’ll need to manually invite the ZeroPath bot.

​
Notification Types

Each notification setting that delivers to Slack chooses its Event Types. The most common are: No event type is selected by default.

​
Notification Format

New-vulnerability notifications display a rich card for each finding, including:
  • Title — linked directly to the finding in the ZeroPath app
  • Severity — emoji badge with score (e.g., Critical 92)
  • Status — current finding status (Open, Patched, False Positive, etc.)
  • Affected file — the file and line number where the vulnerability was found
  • Pull request — the PR that triggered the scan, for PR scan notifications
  • Introduced by — the git-blame author who introduced the vulnerable lines, when available
  • Description excerpt — a short summary of the finding
  • Triage button — a one-click link to triage the finding in ZeroPath
Up to five findings are shown per message, sorted by severity. When more findings exist than fit in a single message, a trailing link is included to view the full scan results.

​
Score Threshold

Set a vulnerability score threshold (0–100) to filter notifications. Only findings with a score at or above the threshold are included in the notification message. This prevents low-severity noise from flooding your channels.

​
Channel Configuration

You can create multiple notification settings on Settings → Notifications, each delivering to different Slack channels with different settings. For example:
  • #security-critical — Full scans only, threshold 80 (Critical/High findings only)
  • #dev-notifications — All scans, threshold 0 (all findings)
  • #pr-reviews — PR scans only, only new vulnerabilities

​
Managing Slack notification settings

Slack channels are configured on Settings → Notifications. The Slack integration panel links there:
  • Create a setting: click Create New Setting, select Slack under Notification Channels, pick channels under Select Slack Channels, choose Event Types and a Minimum Vulnerability Score, then click Create Setting.
  • Edit a setting: expand it, click Edit channels under Slack Channels to change channels, adjust event types or the threshold, then click Save Changes.
  • Disable or delete a setting: expand it and click Disable or Delete.
  • Search channels: type in Search Slack channels… to filter channels by name.
When you expand a notification setting, ZeroPath looks up each saved Slack channel. A channel that has been archived, deleted, or made private, or that the Slack app was removed from, is shown as a highlighted chip with a “not found” tooltip. ZeroPath does not remove it automatically, and Edit channels lists only the channels ZeroPath can currently see, so a missing channel cannot be unchecked there. To drop it, delete the setting and create a new one with the channels you want.

​
Assistant Failure Notifications

If your organization uses the AI AppSec Assistant, ZeroPath sends a Slack notification when a scheduled assistant task fails, for example when a task exceeds its runtime limit. The notification is posted to the Slack channel configured in your assistant settings and includes the task name and a link to view the run details. These notifications are delivered independently of your scan notification settings and do not require any additional configuration beyond having a Slack integration connected and an assistant Slack channel set. ZeroPath retries failed notification deliveries with exponential back-off up to a maximum of 30 attempts. If all 30 attempts fail — for example, because the configured channel has been deleted or the Slack connection has been revoked for an extended period — the notification is discarded rather than retried indefinitely. To avoid missing failure alerts, ensure your Slack integration remains connected and the assistant channel is valid.

​
Troubleshooting

Not receiving notifications
  • Check that the notification setting on Settings → Notifications includes the right event types (for example Scan Complete or PR Scan Complete) and selects Slack with the expected channels.
  • Verify the score threshold isn’t filtering out all findings.
  • For private channels, ensure the ZeroPath bot has been invited.
“Slack integration not found”
  • Reconnect the integration from Settings → Integrations.