> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tolmo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Notifications

> Send new findings and agent activity to Slack channels, and get a daily or weekly email digest.

Your agents work when nobody monitors the dashboard. Notifications tell you about new findings. They can also tell you when an agent starts a live test against your production.

You set notifications one time for the whole organization. Only organization admins can change them.

## Slack

Connect Slack. Then select the channels that receive security notifications. Each channel gets new findings when Tolmo finds them. Each channel also gets a daily digest each morning.

### Route findings to channels

Add one or more channels. Then select the scope for each channel:

| Scope | What the channel gets |
| - | - |
| **Everything** | Each new finding when Tolmo finds it, and a daily digest with all of them. |
| **High & critical only** | Only the findings that need immediate attention, and a short daily digest. |

For example, send **High & critical only** to your on-call channel. Send **Everything** to the channel of your security team.

The default scope applies only to the channels that you add after you set it. It does not change existing channels.

### Agent triggers

Enable **Agent triggers** to post to Slack when an agent starts a run. The Red team agent and the Blue team agent each have a toggle. Both toggles are off by default.

Enable them if your team wants a warning before testing traffic gets to production. For example, your monitoring team can then tell testing traffic from a real attack.

## Email

Email sends finding updates to your inbox. Enable email. Then select a cadence:

| Cadence | What you get |
| - | - |
| **Daily digest** | Each day, a summary of new findings and their severity. |
| **Weekly recap** | Each Friday, a summary of new findings and their severity. You get it also in the weeks with no findings. |

Email has no severity filter. Each digest contains all new findings.

> [!NOTE]
>
> The weekly recap arrives also when the agents find nothing. It shows you that the agents ran.

## Related

* [Mission Control](https://docs.tolmo.com/agents/mission-control.md) shows all the work of your agents. This includes work that sent no notification.
* [Keep up with production changes](https://docs.tolmo.com/pentesting/production-changes.md) explains when the agents run. This tells you when Tolmo can send notifications.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.