Channels
Layer supports three notification channels:| Channel | Configuration |
|---|---|
| A list of recipient email addresses | |
| Slack | A Slack incoming webhook URL |
| Webhook | A URL and a shared secret for signature verification |
Webhook security
Webhook notifications include anx-webhook-signature header containing an HMAC-SHA256 signature of the request body, computed using your shared secret. Verify this signature on your end to confirm the notification came from Layer.
Notification rules
Rules connect events to channels. Each rule specifies:- Event type — what triggers the notification.
- Channel — where the notification is delivered.
- Enabled/disabled — toggle rules on or off without deleting them.
Event types
| Event type | Description |
|---|---|
| Renewal approaching | A contract renewal date is within your configured lookahead window |
| Shadow app detected | A new unmanaged application was discovered |
| Control failing | A compliance control dropped below the passing threshold |
| Control passing | A previously failing compliance control is now passing |
| Evidence expiring | Compliance evidence is approaching its expiration date |
| Access review due | An access review campaign deadline is approaching |
| Questionnaire completed | A vendor security questionnaire was completed |
| Monitor alert | An integration health monitor detected an issue |
| License harvest ping | An unused license candidate was identified for reclamation |
Set up notifications
Create a channel
Go to Settings → Notifications and click Add channel. Choose the channel type (email, Slack, or webhook) and provide the required configuration.
Add notification rules
For each event you want to be notified about, click Add rule, select the event type and the channel, then save.
Email notifications require the Starter plan or above. Slack and webhook channels require the Growth plan or above.