Activity & Notifications¶
Audience: All client users · Where: Activity in the sidebar (/activity), and
the bell icon in the top bar → View all notifications (/notifications).
Overview¶
Canima keeps two records of what happens in your organization:
- Activity: a log of events across the organization, such as assessments started and completed, findings added and fixed, retests, published reports and account changes. Use it to answer "what happened, and who did it?"
- Notifications: messages sent to you, such as a finished scan, a failed scan, a triggered alert or a published report. Use it to answer "what do I need to look at?"
Activity¶
The Activity page lists events newest first. Its subtitle reads "What happened across your organization: assessments, scans, findings, reports and account changes."
| Column | What it shows |
|---|---|
| Activity | What happened, with any notes underneath. |
| Type | The kind of event, for example Assessment started, Finding fixed, Report published, Member invited or API key created. |
| Actor | Who did it: a member's name or email, or System for automated events. Actions taken by a managing firm on your behalf show a by {firm} badge. |
| Assessment | The assessment the event belongs to, if any. |
| When | When it happened. |
Click a row to open the item it refers to (an assessment, a finding, a report, and so on).
Filtering and exporting¶
- Search activity… matches on the event title.
- Type, Entity and Assessment filters narrow the list.
- The Date range selector offers Last 24 hours, Last 7 days, Last 30 days, Last 90 days and All time.
- Use the column toggle to hide columns, and the export button to download the filtered list as CSV.
What you can see
Owners and managers see every event, including organization-level ones such as invitations, API keys and settings changes. Members and viewers see only events for the assessments they can access, and no finding-level events.
Attack-surface history
Attack-surface monitoring events also have their own view under Attack Surface → Monitoring → History. See Attack Surface (ASM).
Notifications¶
The bell¶
The bell icon in the top bar shows a count of your unread notifications. Click it to see the most recent ones. From there you can:
- click a notification to open the item it is about,
- Mark all read, or
- View all notifications to open the full inbox.
The notifications inbox¶
The Notifications page ("Every notification for you and your organization.") lists all of your notifications with their Type, Status (Read / Unread) and When.
- Click a row to open the item it refers to.
- Use Mark read on a row, or Mark all read at the top right, to clear unread items. The bell's count updates at the same time.
- Filter by Status (Unread / Read) or by Type, for example Scan completed, Scan failed, Alert triggered, Retest completed, Report published or Finding status changed.
Choosing what you're notified about¶
- Your own preferences: Settings → Notifications (Notification preferences). See Settings & Security.
- Organization alerting (owners and managers): Administration → Alerts holds the organization's Alert rules, Delivery channels (email, or a webhook in generic JSON or Slack / Discord format) and Recent deliveries.
MSSPs and pentest firms
Activity and notifications belong to each organization. Inside a client you see that client's activity and notifications. Actions your firm takes in a client are recorded in the client's Activity with your firm's name. See For MSSPs & Pentest Firms.
Related: Getting Started · Settings & Security · Findings