UI: Alerts
Reference for the alerts inbox — the clickable status cards, the filter bar, and inline triage actions.
Route: /alerts. A single-page inbox — there is no separate alert
detail route.
Status cards
Four cards across the top — open, escalated, resolved, dismissed — counting the alerts your current filters select. They are also the status filter: click a card to show only that status, click it again to clear.
Because the cards obey the same filters as the table, their four numbers add up to the total shown under the table. With a status selected, that card's number equals the total.
Filters
A filter bar under the cards:
| Filter | Behaviour |
|---|---|
| Date range | Bounds the alert's creation date. Pre-filled to the last 30 days; clear both fields to cover all time, or one of them to leave that end open. |
| Campaign | Combobox, single choice. |
| Policy set | Multi-select; matches alerts raised by any of them. |
| Tag | Multi-select; matches alerts carrying any of them. |
| Country | Multi-select; matches alerts from any of them. |
Filters combine, the list paginates, and the current filters are kept in the URL — so a filtered view can be bookmarked or shared. Changing any filter returns you to the first page and clears the selection.
Table
Each row shows the alert, its current status, the policy set that raised it, and links to the related scan and campaign. Inline actions let you escalate, resolve, or dismiss an alert without leaving the list. Select multiple rows (or Select all) to change status in bulk; Select all covers exactly the alerts the current filters select.
Notifications
Delivery to Slack / Telegram / email is configured under Account -> Alert Notifications; this screen is the in-app inbox. See the concept guide: Alerts.