Push rules
Configure which alerts page iOS users, and how loud. Web dashboard → Settings → Push rules (or Alert Notifications → Push rules).
How rules are evaluated
Every alert runs through your rules in ascending priority order. The first matching rule wins — only it fires. Design your rules so the most specific (and loudest) ones have the lowest priority numbers.
Creating a rule
- New rule.
- Name — "Critical phishing to on-call", etc.
- Priority — lower = checked first. Give critical rules 10, default rules 100+.
- Match severities — click chips for
critical,high, etc. Leave all unselected to match any severity. - Match alert types — comma-separated (e.g.
aitm, phishing_suspected, credential_reuse). Empty = any type. - Target:
- On-call primary — pages the current on-call user for a schedule. Use this for 24/7 coverage.
- Specific admins — page a fixed list of people.
- Role — page every active admin with a given role type.
- Push priority:
- Loud — uses iOS Critical Alerts (bypasses Do Not Disturb, bypasses quiet hours, plays a loud sound). Requires an Apple entitlement; your security team applies for this.
- Default — normal push, respects user's quiet hours.
- Silent — no sound; good for FYI alerts.
- Escalate after (minutes) — optional. If the target doesn't acknowledge within N minutes, the on-call schedule's escalation user is paged.
- Active — toggle on to deploy.
Recommended starter setup
| Priority | Name | Severities | Target | Priority | Escalate |
|---|---|---|---|---|---|
| 10 | Critical to on-call | critical | On-call primary | Loud | 5 min |
| 50 | High to on-call | high | On-call primary | Default | 15 min |
| 100 | Medium to analysts | medium | Role: analyst | Default | — |
Testing a rule
There's no "send test push" button yet — trigger a matching alert via
the browser extension (or from the /cmd/mockapi fixtures in dev) to
validate end-to-end.
Quiet hours
Default-priority and silent rules respect each user's quiet hours (configured in iOS Settings → Push notifications). Loud rules deliberately bypass quiet hours — that's the whole point of loud.