Route alerts outside the panel — safely.

Telegram, email and signed HTTPS webhooks now use encrypted route secrets, bounded retries, per-route rate limits and outbound destination checks. In-app routing remains available with no external dependency.

Encrypted route secrets. Tokens and passwords are encrypted at rest using the server secret key and are never returned by the API after saving.

External delivery never follows redirects. Webhooks require HTTPS:443. SMTP is limited to TLS ports 465/587. Private, loopback, link-local and cloud-metadata destinations are blocked.

Active alerts0

Critical0

Acknowledged0

Dedup suppressed0

Notifications · 24h0

External delivered · 24h0

Queued0

Retrying0

Failed0

Alert Center

Loading alert state…

Route alerts outside the panel — safely.

Alert Center

Routes

Notification timeline