Email (SMTP)

Any SMTP server. Sends through your provider; nothing routes through us.

Where to get it

Any SMTP server you already have — your mail provider, a relay, or a self-hosted Postfix.

Install / what you need

Nothing to install. You need an SMTP host, port, and credentials (app password recommended).

How to connect

1. 1 Have your SMTP host + port + username/app-password ready.
2. 2 Open the dashboard's Notifications panel → Add destination → choose email, paste them (stored in the vault).
3. 3 Hit Send test on the destination card.
4. 4 Confirm the test mail lands and the receipt appears in the dashboard's Delivery log.

When you'd use it

Herald hands every alert to the EmailAdapter as a DispatchPlan. The fields below are what the dashboard form asks for; the sample is the plan the adapter receives. The adapter renders it into the channel-native shape (Discord embeds, Teams MessageCards, PagerDuty Events-API payloads, TwiML, JSON POST bodies) on the way out — that wire transcript varies per channel.

{
  "decision_id": "tdc-2026-06-20-abc12",
  "channel": "<channel-type>",
  "recipient": {
    "recipient_id": "soc-oncall",
    "display_name": "SOC on-call",
    "addresses": [
      {
        "channel": "<channel-type>",
        "address": "<destination>",
        "min_defcon": 5
      }
    ]
  },
  "urgency": "high",
  "retry_policy": {
    "max_attempts": 3,
    "initial_backoff_seconds": 5
  },
  "subject": "Suspicious login on CEO-LAPTOP",
  "body": "Warden flagged a PowerShell child of WINWORD.EXE. The encoded command resolved to a base64-wrapped Invoke-WebRequest to a newly-registered domain. Trust ladder: L3.",
  "approval_link": "https://app.cybercli.local/approve/abc12",
  "incident_ref": "case-2026-0142",
  "signal_id": "sig-2026-06-20-9f3"
}