How do I integrate with Slack?
This article describes how to set up the Slack integration so you can receive security scan notifications and vulnerability alerts directly in your Slack workspace.
⚠️ Caution: You must have Slack workspace administrator privileges to set up this integration.
Before setting up the integration, you will need the following from Slack:
- Channel ID: The unique identifier for the Slack channel where you want to receive notifications. You can find this in your Slack channel URL. For example, in the URL
https://mycompany.slack.com/messages/ABC123, the channel ID isABC123. - Bot User OAuth Token: An API token generated when you create a bot app in Slack. You will create this during the setup process below.
Step 1: Create a bot app in Slack
- Go to https://api.slack.com/apps.
- Click Create New App.
- Select From Scratch.
- Enter an App name, e.g., "Holm Security Alerts".
- Select your workspace from the dropdown.
- Click Create App.
Step 2: Configure app permissions
- On the left sidebar, click OAuth & Permissions.
- Scroll down to the Scopes section.
- Under Bot Token Scopes, click Add an OAuth Scope.
- Select chat:write from the list.
- At the top of the page, click Install to Workspace (or Reinstall to Workspace if already installed).
- Click Allow to authorise the app.
Step 3: Copy your Bot User OAuth Token
After installing the app, your Bot User OAuth Token will appear at the top of the OAuth & Permissions page.
- Copy the Bot User OAuth Token (it starts with
xoxb-). - Keep this token secure and do not share it.
Step 4: Invite the bot to your Slack channel
- In Slack, open the channel where you want to receive notifications.
- Click Details in the top-right corner.
- Go to the Members section.
- Click Add members.
- Search for and select your bot app, e.g., "Holm Security Alerts".
💡 Tip: If you don't see your bot in the member list, make sure you successfully installed the app in Step 2.
Step 5: Set up the integration in Security Center
- Log in to Security Center.
- Click the Menu icon in the top-right corner.
- Click Integrations.
- Check Enable Slack.
- Click Configure to set up the integration:
- Channel ID — the channel ID identified in the requirements above.
- API Token — the Bot User OAuth Token copied from Slack.
- Click Send test message.
- Click Update settings.
- Done!
Troubleshooting
Using Bot Tokens
If you are using the new Bot Token, you may need to configure additional permissions. See the related article for more information:
How do I configure the Bot Token?
Bot not receiving messages
If the integration is enabled but you are not receiving notifications, verify the following:
- The bot has been invited to the channel (see Step 4).
- The chat:write permission is enabled in the Slack app settings.
- Notification types are enabled in Security Center (see Step 5).
For more information, please contact our customer support.