Book a demo

Platform · Integrations and API

The alert goes where the analyst already is.

Slack, Microsoft Teams, Discord, signed webhooks and email, for each change or as a digest. The alert channels come with every plan, and the Professional and Enterprise plans add a documented REST API.

Book a demoTalk to the team
Slack · Teams · Discordimmediate or digestWebhookHMAC-SHA256 · retries · replayEmail · exportsSMTP over TLS · JSON, CSV, PDF

Channels

Five channels and an API.

  • Slack

    A message in the channel you choose, with the application, what changed and a link to the evidence.

    each change or a digestno page content

  • Microsoft Teams

    The same message in a Microsoft Teams channel.

    each change or a digestno page content

  • Discord

    The same message in a Discord channel.

    each change or a digestno page content

  • Webhook

    A signed webhook for any other system, so the receiver can check that each message came from Vikax.

    HMAC-SHA256 signaturetimestamp and event ID headers

  • Email

    Single alerts or a digest, sent over an encrypted, authenticated connection.

    encrypted deliverydigest in your time zone

  • REST API

    A REST API with 106 documented operations and scoped workspace keys. Merging and splitting releases is available only through the API.

    OpenAPI 3.1106 operations · 28 permission scopes

Exports

  • JSON export
  • CSV export
  • PDF and HTML
  • ZIP evidence

Delivery

Each change, a digest, or nothing.

Choose for each destination: alerts as changes happen, a digest on the days and at the time you set, or nothing. Failed deliveries are retried six times over about nine hours, then wait for a replay. Every replay is recorded.
  • Retries at 30 s, 2 min, 10 min, 30 min, 2 h and 6 h
  • Replay on request, recorded in the audit log
  • Digest schedule: time zone, weekdays and send time

API

The console's records, through an API.

An OpenAPI 3.1 document describes 106 operations across 80 paths. Workspace keys carry only the permissions you give them, from 28 scopes. Writes accept an idempotency key, and the default limit is 120 requests per minute.
  • Workspace keys never stored in readable form
  • Multi-factor authentication for people calling the API
  • Signed pagination and safe retries on writes

In the console

Destinations, deliveries and keys.

Each destination with its mode, the delivery log with retries, the API keys and how webhooks are signed.

demo-bank / settings / integrations

Integrations1 destination retrying

OpenAPI 3.1Add destination

Slack

ok
Target#sec-monitoring
Modeimmediate
Last delivery06:41 UTC

Microsoft Teams

ok
TargetSecurity operations
Modedigest · 08:00 · weekdays
Last delivery08:00 UTC

Webhook

retrying
Targethttps://hooks.example.net/vikax
Modeimmediate · signed
Last delivery06:41 UTC · attempt 3 of 7

Email

ok
Targetsoc@demo-bank.test
Modedigest · 08:00
Last delivery08:00 UTC

Delivery log

a failed delivery retries six times over about nine hours, then waits for a replay
WhenEventDestinationStatusAttempts
09 Oct, 08:00Daily digestMicrosoft Teamsdelivered1
09 Oct, 08:00Daily digestEmaildelivered1
09 Oct, 06:51Change alertWebhookretry in 10 min3
09 Oct, 06:41Change alertSlackdelivered1
08 Oct, 22:15Change alertSlackdelivered1
08 Oct, 22:15Change alertWebhookdelivered2

API keys

scoped · only a fingerprint is stored
New key
NamePrefixScopesLast used
SIEM exportvx_live_example_7f3a…409 Oct, 09:12
Reporting exportvx_live_example_c21d…208 Oct, 17:40

Webhook signing

Headers on every deliverysignature · timestamp · event ID
SignatureSigned with your secret over the timestamp and body
API limits120 requests per minute for each key

Questions

Common questions

The application, how far it has moved since its last assessment, the kinds of change and a link to the record. Alerts never include page content.

Vikax retries it six times over about nine hours, at 30 seconds, 2 minutes, 10 minutes, 30 minutes, 2 hours and 6 hours. After that it waits for a replay, and every replay is recorded.

Each workspace key carries only the permissions you give it and is never stored in a form anyone can read back. People who call the API with their own account need multi-factor authentication. The default limit is 120 requests per minute.

Book a demo

Connect the channel your team watches.

A walkthrough of destinations, digests and the API on sample data, with the team that built Vikax.

Book a demoTalk to the team