Connect APVISO with Mattermost

How APVISO Integrates with Mattermost

APVISO's Mattermost integration delivers penetration testing alerts to your self-hosted or cloud Mattermost instance. For organizations that choose Mattermost for its data sovereignty, open-source foundation, or on-premises deployment, this integration ensures security findings are delivered without compromising your communication infrastructure choices.

Webhook-Based Notifications

The integration uses Mattermost's incoming webhook API to deliver formatted messages. Each vulnerability finding is sent as a rich message with an attachment containing the severity level (color-coded), vulnerability title, affected endpoint, description, and a link to the full finding in the APVISO dashboard.

The webhook approach requires no plugins or custom Mattermost server modifications. It works with any Mattermost deployment that supports incoming webhooks, including community edition and enterprise edition.

Channel Routing and Filtering

APVISO supports multiple Mattermost webhooks, each targeting a different channel. Configure routing rules to send Critical findings to your #security-incidents channel, High findings to #security-triage, and lower-severity findings to #security-backlog. This keeps your channels organized and ensures the right team members see the most urgent findings first.

You can also filter by event type. Some channels might receive only finding notifications while others get the full scan lifecycle — start, progress, and completion events.

Self-Hosted Data Sovereignty

For organizations in regulated industries or government sectors, Mattermost's self-hosted model is often a requirement. The APVISO integration respects this architecture by sending notifications directly to your Mattermost webhook endpoint. If your Mattermost instance is not publicly accessible, you can configure a webhook relay or VPN tunnel to receive APVISO notifications while keeping your Mattermost instance behind your firewall.

Scan Event Coverage

The integration covers the full APVISO scan lifecycle. Configurable notifications include scan started, finding discovered (with per-severity filtering), scan progress updates, scan completed with summary, and report ready for download. Each event type can be independently enabled or disabled per webhook.

Enterprise Features

For Mattermost Enterprise deployments, APVISO notifications integrate with Mattermost's compliance and archival features. All security notifications are captured in Mattermost's compliance exports, providing an audit trail of security communications. This is valuable for organizations that need to demonstrate security response processes to auditors.