Skip to main content

Priority Escalation Agent

Organizations: Configure Automations to send high-priority report notifications through your integrations.

Updated this week

This feature is still in Beta

Never miss a high-impact threat. After the intake process is complete, but before validation, the priority escalation agent identifies sensitive data, weighs business impact, and applies CVSS assessment by Hai to determine urgency, so findings with the greatest risk get immediate attention. These alerts are powered by Automations, with ready-to-use templates for Slack, Teams, PagerDuty, Email, and Webhooks.

Key Capabilities:

  • Escalate issues based on business impact, not just technical severity.

  • Accelerate action on vulnerabilities that threaten your most critical assets and data.

  • Send alerts directly into Slack, Teams, PagerDuty, or email for an early warning.

Setup Instructions

  1. Ensure you have a valid product edition (Platform Enterprise, Enterprise, Pentest Premium hours)

  2. Go to Organization settings > Automations

  3. Click New automation

  4. Choose a template. Search for Early Warning for the early warning notifications.

  5. Select one or more of the following integrations and follow the corresponding setup instructions.

    choose an automation template screen

Slack

The Slack template automatically detects if you’re using:

  • Incoming Webhook URL (contains /services/ in the URL)

  • Workflow Trigger Webhook URL (contains /triggers/ in the URL)

For Workflow Triggers, the payload is sent as simple key-value pairs:

Incoming Webhook

  1. Follow this guide to set up your Slack webhook.

  2. Go to the Automations page and select the Slack template.

  3. Enter your Slack webhook URL and click Save.

    configure automation

Workflow Trigger

Follow the same steps as Incoming Webhook, then:

  1. Go to the Automations page.

    automations page in slack

  2. Match key–value pairs.

    matching key values

  3. Add an action.

    adding an action

  4. View the automation overview.

    viewing the automation overview

Email

Enter the email addresses of the recipients. Use commas to separate multiple addresses.

configure automation screen

Microsoft Teams

  1. Create a new Instant cloud flow or Automated cloud flow

  2. Add When an HTTP request is received as the trigger

  3. (Optional) Define a JSON schema for the expected payload.

  4. Add a Post message in a chat or channel action for Teams

  5. Configure the Teams channel and use the received data to build your message or Adaptive Card.

  6. Save the flow to generate the HTTP POST URL

  7. Copy the generated callback URL

  8. Paste it into your automation URL field and click Save.

Edit your automation modal

Pagerduty

  1. Log in to your PagerDuty account.

  2. Create a new service or use an existing one:

    1. Go to Configuration > Services.

    2. Click New Service (or use an existing service).

    3. Fill out the required fields, including escalation guidelines

      create a service screen
  3. Under Integration settings, select:

    • Integration Type: Events API V2

      pagerduty events api v2
    • Integration Name: e.g., HackerOne Early Warning

  4. Copy the Integration Key.

  5. In HackerOne:

    • Go to Organization settings > Automations > Secrets.

    • Click Add secret.

    • Set Variable name to pagerduty_integration_key.

    • Set Secret to the Integration Key you copied.

    • Click Save.

      add a secret screen
  6. Go to the automation secrets page and add:


General Webhook

  1. Add your webhook URL

  2. Click Save

    configure automation screen

Did this answer your question?