Feature Request: Vault-Level Notifications for New or Changed Items
Problem Statement
Currently, there is no native way for administrators or vault managers to be alerted when a new item is added to a shared vault. Anyone with write access can add items to a vault without anyone else being notified. For vaults holding sensitive or tightly controlled credentials, this makes it hard to spot unexpected additions, such as an unauthorized secret, a misplaced credential or an item that bypasses internal process, until someone happens to review the vault.
The only current option is Events Reporting, which requires a SIEM or a custom integration built on the Events API. That is a significant overhead for organizations that simply want an email or Slack alert on a specific vault.
Proposed Enhancement
Introduce configurable notifications at the vault level, so designated recipients are alerted when specific activity occurs in that vault. This would allow administrators to:
- Be notified when a new item is added to a high-sensitivity vault (e.g., privileged credentials, production secrets, break glass)
- Monitor critical vaults without enabling noisy, account-wide alerting
- Respond to unexpected changes without building and maintaining a custom Events API integration
Suggested Functionality
- Admin-configurable notification rules at the vault level (opt-in per vault)
- Selectable triggers: item created, item edited, item deleted or archived, and optionally members added or removed
- Selectable recipients (vault managers, specific admins or groups) and delivery channels (email, with Slack or webhook as a further option)
- Optional digest mode (e.g., daily summary) to reduce notification volume on busier vaults
- Notifications that identify the vault, the action, the user and the time, without exposing item contents
- Audit logging of notification rule changes
Use Cases
- Monitoring vaults holding privileged credentials or production secrets where changes are rare and any addition warrants review
- Compliance scenarios that require evidence of oversight and timely detection of changes to sensitive data sets
- Teams without a SIEM that still need lightweight visibility into critical vaults
- Detecting items saved to the wrong shared vault
Impact / Benefits
- Faster detection of unexpected or unauthorized changes to critical vaults
- Improved security posture without requiring SIEM infrastructure or custom scripting
- Reduced manual effort in reviewing vault contents and activity logs
- Better alignment with enterprise security policies and compliance requirements
Thank you for your consideration.