>
    Strata Copilot
    Send SSPM Notifications to Webhooks
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Assess Posture Security
    4. Send SSPM Notifications to Webhooks
    Download PDF
    SaaS Security

    Send SSPM Notifications to Webhooks

    Table of Contents

    Send SSPM Notifications to Webhooks

    Learn how to send SaaS Security Posture Management notifications to another app's incoming webhooks.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • SaaS Security Posture Management license
    Or any of the following licenses that include the Data Security license:
    • CASB-X
    • CASB-PA
    You can configure SaaS Security Posture Management to send notifications to a Slack or Microsoft Teams channel, or to a Webex space. To do this, you must first create an incoming webhook for the desired channel or space within the respective application. Refer to the Microsoft documentation or the Slack documentation for more instructions on creating incoming webhooks in these apps. For Webex, you can create a incoming webhook from the Incoming Webhooks page in the WebEx App Hub. When you create a webhook in these apps, the apps provide you with a URL that external apps can use to post messages. To enable SSPM to send notifications, you provide SSPM with the webhook URL.
    Prerequisite: Before completing the following steps, create an incoming webhook for a Slack or Microsoft Teams channel, or for a Webex space. Copy the incoming webhook URL that the app provides.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationSaaS SecuritySettingsAlerts & Notifications.
      The Alerts & Notifications page lists all of the webhooks for your tenant.
    3. To add a new webhook, Create Webhook.
    4. Fill in the fields of the Create Webhook dialog.
      1. Provide a Name for the webhook, and select the App Type.
      2. Specify the incoming Webhook URL that you obtained from Slack, Microsoft Teams, or Webex.
    5. Test Webhook to verify that SSPM can post messages to it.
      If the webhook test fails, verify that the Webhook URL is correct and reachable.
    6. If the webhook test succeeds, Save Webhook.
      Your new webhook is added to the table of webhooks on the Alerts & Notifications page. From the table of webhooks, you can enable or disable a webhook, edit a webhook, and delete a webhook.
      When a webhook is enabled, SSPM can send notifications to the webhook URL. SSPM will send notifications when apps are onboarded or deleted, the first time an app is scanned, and when scans detect changes to an app's configuration settings. The notifications are displayed in the Slack or Microsoft Teams channel, or the Webex space, that is associated with the webhook URL.
      The status column of the table indicates whether SSPM can send notifications to the webhook. SSPM displays the following status values for webhooks:
      StatusMeaning
      Active
      SSPM can connect to the webhook to send notifications.
      Registered
      The webhook was recently created or reenabled in SSPM and is becoming Active.
      Unhealthy
      Recent attempts to connect to the webhook were unsuccessful, but SSPM will continue trying. Verify that the webhook URL is reachable and that the webhook is accepting incoming notifications. To test the webhook, select the edit icon in the Actions column and Test Webhook. This might be a temporary problem, but if attempts to connect to the webhook URL continue to fail, SSPM will set the webhook status to Down.
      DisabledThe webhook isn’t enabled. To enable the webhook, position the Enabled toggle to the on position.
      DownMultiple consecutive attempts to connect to the webhook were unsuccessful. Verify that the webhook URL is reachable and that the webhook is accepting incoming notifications. To test the webhook, select the edit icon in the Actions column and Test Webhook.

    © 2026 Palo Alto Networks, Inc. All rights reserved.