Slack
Webhook-based channel with Block Kit cards.
Integrations
Works With Your Stack
Route findings to your chat. File tickets in your tracker. Hook into your pipelines. 12 notification channels and 9 ticketing systems, out of the box.
Notifications
12 notification channels
Route scan, monitoring, and cloud alerts to any mix of channels. Per-integration severity routing and team-wide defaults.
Microsoft Teams
Adaptive cards via incoming webhook.
Discord
Embeds for security and monitoring events.
SMTP delivery, per-user and per-team.
SMS (Twilio / Vonage)
BYOK SMS via Twilio or Vonage.
Telegram
Bot API with HTML formatting.
Pushover
Mobile/desktop push, priority mapping.
ntfy
Self-hosted or ntfy.sh topic publishing.
Google Chat
Cards v2 via webhook.
PagerDuty
Trigger and auto-resolve incidents.
OpsGenie
Create and auto-close alerts.
Datadog
Events API for dashboards.
Ticketing
9 ticketing systems
Auto-create tickets on new findings, or file them on-demand from the findings table. Severity thresholds are configurable per integration.
Jira
Auto or manual ticket creation.
Linear
Auto or manual ticket creation.
GitHub Issues
Auto or manual ticket creation.
Zendesk
Auto or manual ticket creation.
ServiceNow
Auto or manual ticket creation.
Azure DevOps
Auto or manual ticket creation.
ClickUp
Auto or manual ticket creation.
Asana
Auto or manual ticket creation.
Freshdesk
Auto or manual ticket creation.
Observability
Metrics & error tracking
Plug Metric Tower into the observability stack you already run.
Prometheus
Scrape endpoint exposes 27+ custom metrics covering HTTP, scans, sidecars, auth, billing, and notifications. IP-restricted.
Grafana
Four auto-provisioned dashboards: Operations, Scanner Performance, Monitoring Health, and Infrastructure. Ships with Docker monitoring profile.
GlitchTip / Sentry
Self-hosted GlitchTip receives PHP and JavaScript error events. Compatible with Sentry SDKs, so you can swap it for Sentry SaaS.
Authentication
Identity & SSO
Google OAuth 2.0
Available on every plan. Links to existing accounts via a secure pending-link flow.
TOTP & WebAuthn
Every user can enroll TOTP codes and FIDO2 security keys. Admins can enforce MFA team-wide.
Enterprise SSO (SAML/OIDC)
SAML and generic OIDC are on the roadmap for Enterprise. Contact sales for early access.
Automation
API, webhooks & CLI
REST API
Full scan lifecycle plus monitoring, exports, and activity log -- all authenticated via Sanctum tokens.
Generic webhooks
Subscribe to scan, finding, and monitoring events. Signed payloads, retry-safe delivery.
CLI via scan:ci
Artisan command designed for CI/CD pipelines. Failing builds on severity thresholds is trivial.
Do not see your tool?
Generic webhooks plus the REST API cover most gaps. Enterprise teams can work with us on custom integrations.