Integrations

Setting Up Integrations

The generic flow for connecting any integration: select a provider, configure credentials, choose events, and test.

General Setup Flow

All APVISO integrations follow the same setup pattern. The specifics vary by provider, but the overall flow is consistent.

Step 1 — Select Provider

Navigate to Settings → Integrations → Add Integration. Browse or search the list of available providers. Click the one you want to set up.

Step 2 — Authenticate

Depending on the provider, authentication works in one of several ways:

  • OAuth (Jira, Slack, GitHub, GitLab) — click Connect and authorize APVISO in the provider's consent screen. Tokens are stored encrypted.
  • API key (PagerDuty, Opsgenie, Datadog) — paste your API key or token from the provider's settings.
  • Webhook URL (Slack incoming webhook, Discord, custom) — paste the webhook endpoint URL.

Step 3 — Configure

After authentication, configure provider-specific settings:

  • Jira — select the project, issue type, and field mappings (severity → priority, etc.).
  • Slack — choose the channel to post to.
  • GitHub Issues — select the repository and label configuration.
  • PagerDuty — select the service and severity-to-urgency mapping.

Step 4 — Choose Events

Select which event types trigger this integration. For example, you might configure Jira to create issues only on finding.created events, while Slack receives all events.

Step 5 — Test

Click Send Test Event to verify the integration is working. APVISO sends a sample payload and reports whether delivery succeeded.

Step 6 — Save and Enable

Click Save. The integration is now active and will fire on the selected events.

Managing Integrations

From the integrations list you can:

  • Edit — update configuration, credentials, or event selection.
  • Disable — temporarily stop the integration without deleting it.
  • Delete — permanently remove the integration.

Delivery Logs

Every integration includes a delivery log showing recent event deliveries, their HTTP status, response time, and any error messages. Use this to troubleshoot failed deliveries.

Retry Behavior

Failed deliveries are retried up to 3 times with exponential backoff (1 minute, 5 minutes, 30 minutes). If all retries fail, the delivery is marked as failed and appears in the delivery log with error details.

Security

All credentials and tokens are encrypted at rest using AES-256. OAuth tokens are refreshed automatically. API keys and webhook URLs are never exposed in the UI after initial entry.