Slack

Ask SubImage security questions directly from Slack by mentioning @SubImage in a channel or sending the app a direct message. SubImage responds in a thread using the linked user's SubImage access. The integration can also send security notifications to Slack and sync your workspace structure into SubImage.

What SubImage does

SubImage connects through an OAuth app install. The bot token is obtained automatically during install, so there is no manual token to configure. Once connected, the integration provides:

• Assistant in Slack: mention @SubImage in a channel or send the app a direct message to ask about your security data.
• Issue routing: automatically send matching SubImage issues to selected Slack channels, with optional filters for priority, issue type, and exposure.
• Notifications: deliver SubImage alerts to the Slack channels you choose.
• Workspace sync: the Slack module ingests your teams, users, channels, and groups for identity and collaboration visibility.

Install SubImage for Slack

You need an active SubImage tenant, and you must be a SubImage tenant admin to install the integration.

Open SubImage integration settings

1. Find Slack and select Install.
2. Review the requested permissions and authorize SubImage for your Slack workspace.
3. Slack returns you to your SubImage tenant, where the installation completes automatically.

Your Slack workspace settings may require a workspace owner or admin to approve the app before authorization can finish.

Link your Slack account

Each person who asks SubImage questions in Slack must link their Slack identity to their existing SubImage user:

1. Open the Slack section of your SubImage profile.

2. Select Generate link code.

3. Open a direct message with the SubImage app in Slack and send it the one-time code.

4. After SubImage confirms the link, ask your question again.

The link ensures that Slack responses use your own SubImage access.

Ask SubImage in Slack

1. Add the SubImage app to the channel where you want to use it.
2. Mention the app with a question, for example: @SubImage what critical issues should we address first?
3. Continue the conversation in the response thread.

You can also send the SubImage app a direct message. In private channels, invite the app before mentioning it.

AI-generated responses, summaries, and other outputs may be inaccurate. Verify important information before relying on them.

Slack's dedicated assistant pane requires a paid Slack plan. The @SubImage mention and direct-message flows documented above do not use that pane.

Configure issue routing, notifications, and workspace sync

• To route issues automatically, create a Slack route in Settings > Issue Routing, choose a channel, and optionally filter by priority score, primary issue type, or exposure.
• To receive alerts, pick the destination channels in Settings > Notifications.
• For workspace sync, enable the Slack module in Modules > Slack.

For private channels, invite the SubImage app so it can post there.

Consent scopes

When you install Slack, SubImage requests the scopes below. They fall into a few groups:

• Posting and reacting: chat:write, chat:write.public, im:write, reactions:write
• Slack app interactions: app_mentions:read, assistant:write, commands
• Reading conversation context for the assistant: channels:history, groups:history, im:history, mpim:history
• Workspace inventory: channels:read, groups:read, team:read, team.preferences:read, usergroups:read, users:read, users:read.email, users.profile:read

Module configuration

The Slack OAuth integration provides the credential; the Slack sync module controls what workspace data SubImage ingests (for example slack_channels_memberships). See the Slack module setup guide for those options.

For help, contact SubImage support. See the SubImage Privacy Policy for how SubImage handles data.