Skip to main content

Get email alerts for new vulnerabilities

Configure vulnerability alerts when you want a periodic email if automated SBOM scans find new critical, high, or known-exploited vulnerabilities.

What the summary email includes​

The Organization vulnerability summary email includes:

  • Counts for newly found critical, high, and known-exploited vulnerabilities.
  • Newly affected projects, with links back to the relevant Platform vulnerability views. If an SBOM is not associated with a project, the summary uses the SBOM file information instead.
  • Current organization totals for critical, high, and known-exploited vulnerabilities.
  • The top affected projects in the organization.

The Platform groups alert details at the project level, so multiple newly affected SBOM reports for the same project appear as one project summary. If an automated scan only finds lower-severity vulnerabilities and no newly affected project has critical, high, or known-exploited vulnerabilities, the summary email is not sent.

Manual SBOM uploads and manually started re-scans remain visible in the Platform, but they do not by themselves trigger this email.

Enable Vulnerability Alert Emails​

  1. Invite or confirm that each recipient has an account in your organization. You can see this on the organization Settings → Users page.
  2. Open the organization Settings → Vulnerability Alerts.
  3. Turn on Organization vulnerability summary email.
  4. Under Summary email recipients, enter each recipient's RunSafe Platform login email.
  5. Select Add after each address.
  6. Select Save changes.

At least one recipient is required before the summary email can be enabled. To stop the emails, turn off Organization vulnerability summary email and save.