Slack Integration
Get BlockSecOps notifications directly in your Slack workspace. Receive real-time security scan notifications in Slack: - Scan completion alerts with...
Slack Integration
Get BlockSecOps notifications directly in your Slack workspace.
Overview
Receive real-time security scan notifications in Slack:
- Scan completion alerts with vulnerability counts
- Critical vulnerability notifications
- Beautiful Block Kit formatting with action buttons
Quick Setup (Webhook)
The fastest way to get Slack notifications:
1. Create a Slack Webhook
- Go to Slack API Apps
- Click Create New App → From scratch
- Name your app (e.g., "BlockSecOps Alerts")
- Select your workspace
- Click Create App
2. Enable Incoming Webhooks
- In the left sidebar, click Incoming Webhooks
- Toggle Activate Incoming Webhooks to On
- Click Add New Webhook to Workspace
- Select the channel for notifications (e.g.,
#security-alerts) - Click Allow
- Copy the webhook URL
3. Add to BlockSecOps
- Go to Admin → Notifications in the BlockSecOps dashboard
- Click Add Channel
- Select Slack as channel type
- Paste your webhook URL
- Select events to subscribe to:
scan.completed- When scans finishvulnerability.critical- Critical findingsscan.failed- Scan errors
- Click Create Channel
- Click Test to verify the connection
Webhook URL Format
https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX
Notification Format
BlockSecOps uses Slack Block Kit for rich, actionable notifications:
Scan Completed
Scan Completed
Contract: Token.sol
Scan ID: abc123
Vulnerabilities Found:
• Critical: 0
• High: 2
• Medium: 5
• Low: 3
[View Results]
Critical Vulnerability
Critical Vulnerability Found
Contract: Token.sol
Severity: Critical
Scanner: Slither
Reentrancy vulnerability detected in withdraw function...
[View Details]
Channel Configuration
Default Channel
Set a default channel for all notifications:
- Go to Settings → Integrations → Slack
- Select Default Channel
- Choose from your Slack channels
- Save
Project-Specific Channels
Route notifications to different channels per project:
- Go to Projects → Select project → Settings
- Under Notifications, select Slack Channel
- Choose the channel for this project
- Save
Notification Types
Scan Completed
✅ Scan Completed: Token.sol
Summary:
• Critical: 0
• High: 2
• Medium: 5
• Low: 3
Duration: 45 seconds
Scanner: Standard preset
[View Results] [View Contract]
Critical Vulnerability Found
🚨 Critical Vulnerability Detected
Title: Reentrancy Vulnerability
Contract: Token.sol
Line: 45
Scanner: Slither
Risk Score: 95
The withdraw function is vulnerable to reentrancy...
[View Details] [Assign to Me]
Scan Failed
❌ Scan Failed: Vault.sol
Error: Compilation failed
Details: ParserError at line 23...
[View Details] [Retry Scan]
Daily Summary
📊 Daily Security Summary - Jan 15, 2025
Scans: 12 completed, 1 failed
New vulnerabilities: 23
By Severity:
• Critical: 0
• High: 4
• Medium: 12
• Low: 7
Top Issues:
1. Missing Access Control (3)
2. Unchecked Return Values (2)
3. Reentrancy Risk (2)
[View Dashboard]
Slash Commands
After integration, use Slack commands:
/blocksecops scan
Start a quick scan:
/blocksecops scan <contract-name>
/blocksecops status
Check recent scan status:
/blocksecops status
/blocksecops summary
Get vulnerability summary:
/blocksecops summary [project-name]
Interactive Messages
Slack messages include interactive buttons:
View Results
Opens scan results in browser.
Assign to Me
Assigns vulnerability to you.
Mark False Positive
Marks finding as false positive (with confirmation).
Retry Scan
Starts a new scan with same settings.
Mentions and Alerts
User Mentions
When vulnerabilities are assigned:
@john.doe has been assigned a critical vulnerability:
Title: Integer Overflow
Contract: Calculator.sol
[View Details]
Channel Alerts
Configure urgent notifications to alert channel:
<!channel> 🚨 Multiple critical vulnerabilities detected in production contracts!
3 critical findings require immediate attention.
[View All]
Filtering Notifications
By Severity
Only receive notifications above a threshold:
- Go to Settings → Integrations → Slack
- Set Minimum Severity: Critical, High, Medium, or Low
- Save
By Project
Mute notifications for specific projects:
- Go to Projects → Select project → Settings
- Under Notifications, toggle Slack Notifications off
- Save
By Scanner
Filter notifications by scanner:
- Go to Settings → Integrations → Slack
- Under Scanner Filter, select scanners
- Only findings from selected scanners trigger notifications
Scheduled Reports
Daily Digest
Receive a daily summary at a specific time:
- Go to Settings → Integrations → Slack
- Enable Daily Digest
- Set time (e.g., 9:00 AM)
- Select channel
- Save
Weekly Report
Get a comprehensive weekly report:
- Enable Weekly Report
- Select day (e.g., Monday)
- Set time
- Select channel
- Save
Multi-Workspace Support
Enterprise plans support multiple Slack workspaces:
- Go to Settings → Integrations → Slack
- Click Add Workspace
- Connect additional workspace
- Configure routing rules
Routing Rules
Route notifications based on:
- Project tags
- Team membership
- Severity level
- Scanner type
Troubleshooting
Not Receiving Notifications
- Check Slack connection: Settings → Integrations → Slack status
- Verify channel: Ensure bot is in the channel
- Check filters: Review severity and project filters
- Bot permissions: Re-authorize if needed
Messages Not Posting
- Ensure BlockSecOps bot is added to channel
- Check channel isn't archived
- Verify workspace permissions
Interactive Buttons Not Working
- Clear Slack cache
- Re-authorize integration
- Check browser popup blockers
Disconnecting Slack
To remove Slack integration:
- Go to Settings → Integrations → Slack
- Click Disconnect
- Confirm removal
This stops all Slack notifications. You can reconnect anytime.
Security
Permissions Used
BlockSecOps requests minimal Slack permissions:
- Post to channels
- Read channel list
- Respond to slash commands
Data Shared
Notifications include:
- Contract names
- Vulnerability titles and severities
- Scan status
- Links to BlockSecOps (no source code)
Next Steps
- Email Notifications - Email alerts
- Webhooks - Custom integrations
- Teams - Team notifications