Skip to main content
Your agents work when nobody monitors the dashboard. Notifications tell you about new findings. They can also tell you when an agent starts a live test against your production. You set notifications one time for the whole organization. Only organization admins can change them.

​
Slack

Connect Slack. Then select the channels that receive security notifications. Each channel gets new findings when Tolmo finds them. Each channel also gets a daily digest each morning.

​
Route findings to channels

Add one or more channels. Then select the scope for each channel: For example, send High & critical only to your on-call channel. Send Everything to the channel of your security team. The default scope applies only to the channels that you add after you set it. It does not change existing channels.

​
Agent triggers

Enable Agent triggers to post to Slack when an agent starts a run. The Red team agent and the Blue team agent each have a toggle. Both toggles are off by default. Enable them if your team wants a warning before testing traffic gets to production. For example, your monitoring team can then tell testing traffic from a real attack.

​
Email

Email sends finding updates to your inbox. Enable email. Then select a cadence: Email has no severity filter. Each digest contains all new findings.
The weekly recap arrives also when the agents find nothing. It shows you that the agents ran.