Skip to content

Alert digest

The alert digest is the email Have I Been Squatted sends each member of an organization. It summarizes the alerts the organization’s rules raised in the period, most severe first. Where domain verdicts run, it also lists the suspicious lookalikes they flagged.

Every member of an organization on the Pro plan or higher gets the digest. Each member chooses their own frequency.

Open Settings > Notifications and pick a Frequency:

Frequency Covers
Daily The day before. A daily digest with nothing in it is skipped.
Weekly The week before, Monday to Sunday. This is the default.
Monthly The calendar month before.
Off Nothing. You get no digest emails.

Select Save to keep the change. The panel shows when the next digest of each frequency goes out and a sample of the email.

Your choice applies in every organization you belong to. Any member can change their own frequency; it doesn’t need administrator access.

Each digest is sent from 08:00 UTC on the day after its period closes. Weekly and monthly digests go out even when nothing was raised, so a quiet period still confirms that monitoring ran.

Each digest has an unsubscribe link. It opens a confirmation page, and confirming sets your frequency to Off. Opening the link alone changes nothing, so a mail scanner that follows links can’t unsubscribe you.

To get the digest again, choose a frequency in Settings > Notifications.

The digest is a summary. Alerts aren’t emailed one at a time. To deliver each alert when a rule raises it, add a response on the rule’s Response tab:

  • Notify Slack posts to a Slack channel. See the Slack integration.
  • Notify webhook sends the alert to an endpoint, such as a ticketing or paging tool. See webhooks.
  • SIEM connectors, such as Splunk and Elastic Security, record each alert as an event.

The Alert notifications switch on a Slack channel or a webhook endpoint adds its response to every rule that passes its minimum severity and status filter.