Notification Preferences
Open My Account → Notifications (/account/notifications) to view the Workflow Emails preference. Change the toggle, then select Save Preferences.
Administrators select recipients for reports and digests under Settings → Users Preferences (/settings/users-preferences). The page contains these email options:
- Daily Report
- WAF Report
- News Alert Emails
- CVE Digest Emails
- AI News Summaries
- Monthly New Assets
- Weekly Threat Brief
- Vendor Risk Overview
- Attack Surface Inventory Report
Report recipients
Each administrator checkbox saves immediately. An enabled recipient receives an email only when the report sender runs and its content conditions apply. Recipients must be active. They must log in at least once and complete any required password change before they can receive reports.
Email delivery defaults to enabled until an administrator disables it. Current News and CVE opt-outs remain effective. The optional online-assets Excel attachment defaults to disabled and requires Daily Report delivery.
News and CVE content still follows the organization's Alert Preferences. News and CVE digests exclude internal customer aliases. CVE digest selection does not change recipients for SLA or KEV security alerts. WAF reports retain a support copy.
These settings control future emails. They do not change findings or intelligence in the dashboard.
To stop receiving News or CVE emails, ask your company administrator to remove you from the recipient lists in Settings → Users Preferences. The unsubscribe link in those emails opens this guidance; it does not change your recipient selection automatically.
Workflow preference
The Workflow preference defaults to enabled. It stores always or never for your account. Customer delivery of module-change emails remains disabled. The current assignment and status emails follow their assigned users or teams and do not consistently use this preference.
Other notifications
SLA Policies control policy alerts and escalations. Account security emails, manual shares, exports, and takedown notices to providers use their own recipient rules.