Using the Settings page

The Portal Settings page is where you configure how VMP Security Portal contacts you when something happens on a connected site. The page is divided into four sections: Scan Findings, Daily Digest, Other Security Events, and Alert Type Configuration. Save Changes buttons sit at the top and bottom of the page.

In This Article

• Scan Findings
• Daily Digest
• Other Security Events
• Alert Type Configuration

Scan Findings

A grid lets you choose, per severity (Critical, High, Medium, Low), whether to be notified by Email, SMS, or Slack/Discord. The defaults are Critical and High via Email. Tick or untick the boxes to fit your noise tolerance.

Daily Digest

A single row controls the Daily Digest channel: pick Email, SMS, or Slack/Discord. The Digest gathers low-priority events into a single once-a-day delivery so you do not get an alert for every minor thing.

Other Security Events

This section lists each event type with its own row of channel checkboxes:

• VMP Security automatic update
• VMP Security deactivation
• Web Application Firewall turned off
• An IP address is blocked
• Someone is locked out from login
• Someone is blocked for using a breached password
• The lost-password form is used for a valid user
• An administrator signs in (with optional “only when from a new device”)
• A non-admin user signs in (with optional “only when from a new device”)
• A large increase in attacks is detected
• The Audit Log has not reported in recently

Some rows are disabled until the corresponding setting is turned on inside the VMP Security plugin (for example, the “new device” rows depend on the plugin tracking new devices). The label hint under each row tells you which plugin setting needs to be on.

Alert Type Configuration

This section sets the global delivery details that the rest of the page references:

• Send alerts from individual sites? Yes / No toggle. When No, the per-site plugin alerts are silenced and only Portal-routed alerts go out.
• Emails. Comma-separated list of email recipients.
• Mobile Numbers. Comma-separated list of mobile numbers for SMS delivery.
• Slack/Discord Integration. An incoming-webhook URL to deliver alerts as channel messages.
• Max Email Alerts Per Hour. Per-site rate limit. 0 disables the cap. Test emails, diagnostic emails, and critical security alerts bypass the cap.
• Ignored Alert IPs. One IP per line; alerts originating from these IPs are dropped before delivery. Useful for office IPs that would otherwise generate sign-in alerts every day.