Incidents

Incidents are created automatically when rules fire on dangerous events.

Incident Lifecycle

Open — Created when rule fires
In Review — Team member is investigating
Resolved — Fixed and closed with notes

Incident Details

Each incident includes: the triggering event, the rule that matched, severity, AI risk score, full metadata, timeline of actions, and assigned playbook.

Notifications

Incidents trigger notifications via email and Slack. Configure notification channels in Dashboard → Settings.