Connect APVISO with Twilio

How APVISO Integrates with Twilio

APVISO's Twilio integration provides SMS and voice call alerting for critical security findings. When your team needs to know about a severe vulnerability immediately — regardless of whether they are at their desk, in a meeting, or after hours — Twilio ensures the message gets through.

SMS Alerts for Urgent Findings

When APVISO discovers a Critical or High severity vulnerability, the Twilio integration sends an SMS to your configured phone numbers. The message includes the vulnerability title, severity level, affected endpoint, and a shortened URL to view the full finding in APVISO. SMS alerts are concise by design, providing enough context to understand the urgency while linking to detailed information.

SMS works as an out-of-band notification channel that does not depend on internet-connected chat applications. If your Slack or email is down, SMS still gets through. This makes it an excellent backup alerting mechanism for your most critical security notifications.

Voice Call Escalation

For the most urgent situations, APVISO can trigger Twilio voice calls. When a Critical vulnerability is discovered, Twilio calls the primary on-call contact with a text-to-speech message describing the finding. If the call is not answered or acknowledged, the system escalates to the next contact in the chain.

This escalation pattern ensures that Critical findings always reach a human responder. The voice call acts as a final escalation tier after SMS and chat notifications, providing defense in depth for your security alerting.

Escalation Chains

Configure multi-step escalation chains that define the order in which team members are contacted. The first person receives an SMS. If they do not acknowledge within a configurable window, the second person is contacted. For Critical findings, the chain can include voice calls as a final escalation. Each step in the chain can use a different contact method and timeout.

Integration with Incident Response

Twilio alerts are most effective as part of a broader notification strategy. Use Slack or Teams for routine finding notifications, SMS for High and Critical findings, and voice calls only for Critical findings that represent an immediate security risk. This tiered approach prevents alert fatigue while ensuring urgent findings get immediate attention.

Configuration and Cost

Setting up the Twilio integration requires a Twilio account with an active phone number. APVISO stores your Twilio credentials securely and uses them only to send alerts triggered by scan findings. Standard Twilio pricing applies for SMS and voice calls — there is no additional APVISO charge for using this integration.