Alerts
import { Render } from "~/components";
:::note New resource alerts require a Business plan or higher. Code change and malicious resource alerts require Client-Side Security Advanced. For details, refer to Alert types. :::
You can configure unscoped or scoped alerts:
-
Unscoped alert: Covers all zones in your Cloudflare account. Unscoped alerts are triggered either daily, hourly, or immediately, depending on the alert type.
-
Scoped alert: Covers one or more specific zones. Requires content security rules configured in those zones. Scoped alerts are triggered immediately and only notify you about resources that are covered by your rules. Rule violations do not trigger these alerts. For more information, refer to Scoped alerts.
For alerts sent at regular intervals, you might experience a delay between adding a new script and receiving an alert.
For instructions on configuring alerts, refer to Configure an alert.
Scoped alerts
:::note Only available to customers with Client-Side Security Advanced. :::
If you have configured content security rules in a zone, you can filter alert notifications according to those rules. These alerts are called scoped alerts.
When you create a scoped alert using the Policies of these zones alert filter, you will only receive the most relevant notifications based on the rules you configured.
For each scoped alert, Cloudflare does the following:
- Check which content security rules are enabled in a zone, either in allow or in log mode.
- For every enabled rule, compare the URL of the new or changed resource against the allowed sources in the rule.
- If the resource is allowed by the rule, check if the new or modified resource should trigger the current alert.
- If the alert should trigger, send an alert notification to the configured destinations.
When you create a scoped alert you will not receive notifications for resources that are not allowed by a content security rule (either in allow or in log mode). These are rule violations that you can review in the dashboard, through GraphQL, or via Logpush.
:::note Scoped alerts only fire if the zone has at least one enabled content security rule. :::
For unscoped alerts, you will receive notifications for all resources detected across your zones. Some of these resources may also violate your configured content security rules.