Slack Alerts
Get notified in Slack the moment Trappr detects an incident — canary triggers, DLP violations, tamper events, and policy blocks. Alerts fire in seconds with full context.
What you get
Trappr posts structured alert messages to your configured Slack channel. Each message includes:
- Alert type (canary triggered / DLP match / tamper detected / policy block)
- Agent name and app it belongs to
- Timestamp and severity
- A link to the incident detail in the Trappr dashboard
Setup
Go to api.slack.com/apps and create a new app. Under OAuth & Permissions, add the chat:write scope. Install the app to your workspace and copy the Bot User OAuth Token (starts with xoxb-).
In Slack, go to the channel where you want alerts. Type /invite @YourBotNameto add the Trappr bot. Note the channel name or ID.
Go to Dashboard → Settings → Notifications → Slack. Enter your bot token and channel name (e.g. #ai-security-alerts). Click Save & test to send a test message.
Under Settings → Notifications → Alert rules, choose which event types send to Slack: canary triggers only, all DLP matches, or all events including policy blocks.
#trappr-alerts channel and set it to notify-on-activity. This keeps security incidents visible to the right people without flooding general channels.Alert severity levels
| Severity | Events | Default |
|---|---|---|
| Critical | Canary triggered, agent tampered, agent deactivated | Always on |
| High | Policy block in ENFORCE mode, DLP credentials match | On |
| Medium | DLP PII match, disallowed model attempted | Off |
| Info | Execution started, execution completed | Off |