Skip to main content

Set default user notifications

As an Organization Administrator, you can define default notification settings for all users in your organization both for integrations and for email and in-app notifications in Contrast. Individual users can choose how they receive those notifications.

Steps

  1. Under organization settings, select Notifications.

  2. Use the toggles to enable or disable the subscriptions listed on the left:

    • Active attack: There is an active attack on an application with Protect enabled.

    • New vulnerability: Contrast has detected a new vulnerability. Click in the field to enable notifications for specific severity levels; the default selection is All.

    • Vulnerable library: Contrast detected a new vulnerable library or a new CVE in a library.

    • Server Messages: Receive messages about reliability issues for servers.

    • Server offline: Contrast can't reach a server.

    • New comment: A team member commented on a finding.

    • New asset: A new asset to which the user has access was onboarded. Click in the field to set this notification for Application or Server; the default selection is All.

    • Nearing expiration: An application license is about to expire.

    • Policy violations: A vulnerability is in violation of a compliance, policy, or remediation policy.

      To receive daily email digests of violation notifications, select Aggregate policy violation emails into separate daily email digests and select the type of policy notifcations you want to include in the email.

    • Scan failed: A Contrast scan failed. The notification specifies the name of the Scan project that contains the failed scan.

    • Email digest: A daily summary of Contrast activities. (Email only)

Enable subscription notifications for integrations

To enable subscriptions for a particular integration, select Add integration to add an integration or select an existing integration from the dropdown at the top of the Integrations column.