Skip to content

Slack Integration

The platform ships with a Slack bot that lives in your workspace's channels. It delivers reports and alerts, responds to slash commands, and lets you chat with the AI Assistant right from Slack.

What the bot does

  1. Posts scheduled reports to the channel picked in Scheduled Reports settings.
  2. Sends new alert notifications — as soon as a detection service finds something.
  3. Responds to slash commands — a set of built-in commands.
  4. Talks to the AI Assistant — through /bcp_ask — with the same capabilities as the built-in chat.

Adding the bot to a channel

  1. In Slack — invite the bot to the desired channel: /invite @bcp-bot.
  2. Once the bot is in the channel, it can post reports and alerts there. Which channel is used for what — configured in BCP Portal (Reports → Scheduled or Settings → Integrations → Slack).

Slash commands

The bot supports the following slash commands right in the channel:

  • /bcp_status — a short overview of the current security posture.
  • /bcp_alerts — list of your active alerts.
  • /bcp_alerts critical — filter by severity.
  • /bcp_scan hibp / /bcp_scan pastebin / /bcp_scan code / /bcp_scan ransomware — trigger a scan on demand.
  • /bcp_report — generate a report on the spot.
  • /bcp_link — link your Slack account with your BCP Portal account (see below).
  • /bcp_ask <question> — ask the AI Assistant a question. E.g., /bcp_ask what are my top 3 risks right now?.
  • /bcp_help — full command list with descriptions.

/bcp_ask — asking the Assistant in Slack

/bcp_ask opens a conversation with the Assistant right in Slack, with a few important properties:

  • Your responses are visible only to you. Other channel members don't see your Q&A with the bot — Slack renders the reply as an ephemeral message.
  • The bot keeps context between messages. Follow-up questions in the same conversation work — no need to re-explain context.
  • The Assistant answers only using data you have access to. If a colleague uses /bcp_ask in the same channel, they'll get answers about their data, not yours.

Example flow:

You: /bcp_ask what happened in security this week? Bot: [Ephemeral summary of the week for you] You: /bcp_ask which one should I fix first? Bot: [Recommendation based on the previous answer's context]

Linking a Slack account

For the bot to know which BCP Portal user is asking a question, you need to link accounts once.

  1. In BCP Portal — Settings → Slack → Link Account.
  2. The platform generates a 6-digit code valid for a few minutes.
  3. In Slack, run /bcp_link 123456 (the 6-digit code).
  4. The bot confirms in the DM that the accounts are linked.

After that all your /bcp_ask and other commands work with your BCP Portal permissions and data.

Which channels get what

Configure separately:

  • #security-alerts — critical + high alerts in real time.
  • #security-digest — daily / weekly reports.
  • #c-level — monthly reports for leadership.
  • DM with the bot — personal notifications and answers to your /bcp_ask.

Privacy

  • Answers to /bcp_ask are ephemeral — only visible to the person who asked.
  • The bot has access only to your organization's data, and only to what the querying user is allowed to see.
  • Bytecode staff don't read Slack messages of your workspace — the bot posts and reads only its own messages and slash commands.