Notifications & Alerts
CMDash's notification system delivers timely alerts about posture changes, compliance gaps, integration health, and task deadlines. Notifications can be delivered in-app, by email, in Slack, or in Microsoft Teams.
Alert Rules
Alert rules define the conditions that trigger a notification. Navigate to Notifications > Alert Rules and click New Rule.
Each rule specifies:
- Name — a descriptive label for the rule
- Trigger condition — the metric, threshold, and direction that fires the alert. Examples:
- Posture Score drops below B (numeric: drops below 80)
- Open critical vulnerabilities count exceeds 10
- MFA Coverage % drops below 95
- A new risk with score above 75 is created
- An integration goes into error state
- A remediation task passes its due date without completion
- Severity — Critical, High, Medium, or Low; affects how the notification is displayed in the notification center
- Channels — where the notification is delivered (in-app, email, Slack, Teams); multiple channels can be selected
- Recipients — who receives the notification; can be specific users, all users with a role (e.g., all Admins), or a Slack channel/Teams webhook
Click Save to activate the rule. Rules evaluate continuously as new data arrives from integrations.
Notification Channels
Email (built-in) Email delivery requires no additional configuration. Enter recipient email addresses when creating an alert rule. Scheduled report delivery also uses email.
Slack To configure Slack integration:
- Navigate to Notifications > Channels > Slack.
- Click Connect Slack and authorize the CMDash app in your Slack workspace.
- Select default channels and configure per-rule channel overrides as needed.
Once connected, alert rules can direct notifications to any channel the CMDash Slack app has been added to.
Microsoft Teams To configure Teams integration:
- Navigate to Notifications > Channels > Microsoft Teams.
- Generate an incoming webhook URL in Teams for the target channel.
- Paste the webhook URL into CMDash and give the channel a name.
- Save and test the connection.
Alert rules can then direct notifications to this Teams channel.
In-App Notification Center
The notification center is accessible via the bell icon in the top-right of the navigation sidebar. It shows all notifications triggered by alert rules across all channels, including those delivered externally.
Each notification shows:
- Alert name and severity
- The triggered condition (e.g., "Posture Score dropped from B to C")
- Timestamp
- A link to the relevant resource (the Posture view, a specific risk, an integration, etc.)
Click Acknowledge to mark a notification as reviewed. Acknowledged notifications move to the History tab. You can filter the notification center by severity, date, and acknowledged status.
Digest Emails
In addition to real-time alerts, CMDash sends periodic digest emails summarizing activity since the last digest. Digest frequency options are daily, weekly, and monthly. The digest includes:
- Current Posture Grade and change since the last digest
- New alerts triggered during the period
- Upcoming deadlines from the Compliance Calendar
- Remediation tasks due within the next 7 days
Digest email settings are configurable per user under Profile Settings > Notifications, allowing each team member to set their preferred frequency independent of others.
On Starter plans, only a monthly digest is available. Essentials and above support daily and weekly digests.
Manager overdue digest. Owners and admins can send each team lead their team's overdue items right away from Settings > Weekly Digest > Manager overdue digest > Send now (it needs a plan that includes the weekly digest). It uses the same per-team weekly cooldown as the scheduled send and honours each recipient's notification preferences, so a team already sent to inside its cooldown is skipped and sending twice does not duplicate. The result reports how many teams were sent, how many had nothing overdue, and how many failed.
What's New
Separate from alert notifications, the sparkle icon in the top bar opens What's New (searching for "whats new" without the apostrophe also finds it) — a full page listing every shipped CMDash release, newest first, with a link to the complete public changelog. At most one toast appears per release that is curated as worth calling out; opening the page always marks you caught up, so it never nags twice for the same release.