Zapier integration
Plug Tracelight into 6,000+ apps via Zapier.
Subscribe a Zap to any Tracelight event — alerts, case lifecycle, enrichment completion, monitor matches. Route the data into Notion, Airtable, Google Sheets, your CRM, your case-management system, anywhere Zapier reaches.
What's in this integration
- Subscribe to any of 7 Tracelight events from /dashboard/integrations
- Webhook payload is HMAC-SHA256 signed (X-Tracelight-Signature header) so your Zap can verify origin
- Per-event subscription — opt into only the events you need
- Replay-safe — payload includes occurred_at + event id so dedupe is trivial
Setup
- 1Dashboard → Integrations → New webhook → Kind: Zapier
- 2Paste your Zap's webhook URL (from Zapier's 'Catch Hook' trigger)
- 3Pick events to subscribe to + an optional HMAC secret
- 4Test from Tracelight; the Zap fires within seconds
Events you can subscribe to
case.createdcase.completedsubject.addedenrichment.completedalert.firedreport.generatedmonitor.matchSample payload
{
"event": "alert.fired",
"workspace_id": "abc-123",
"occurred_at": "2026-05-15T18:24:00.000Z",
"data": {
"alert_id": "...",
"subject_id": "...",
"subject_label": "Jane Doe",
"severity": "high",
"title": "New breach: ExampleCorp 2025-09",
"source": "hibp"
}
}Wire it up.
Sign up, head to Dashboard → Integrations, and turn this on in 60 seconds.
Other integrations
Slack
Native OAuth bot + /tracelight slash command + alert notifications routed to channels of your choice.
Discord
Channel webhook for alert digests + per-event notifications. SSRF-guarded outbound dispatch.
Microsoft Teams
Adaptive Card alerts in any Teams channel via incoming-webhook URL. Works with both classic O365 connectors and the new Workflows.
Notion
Pipe Tracelight events into a Notion database — auto-log every case, alert, or report into your team workspace.
Linear
Auto-create Linear issues for high-severity Tracelight alerts. Useful for teams running investigations like an engineering project.
HubSpot
Sync Tracelight cases + alerts into HubSpot CRM as deal records, contacts, or activity timeline entries.
Salesforce
Tracelight events → Salesforce Cases or custom objects via Flow Builder + the generic webhook integration.
Splunk
Stream Tracelight audit events + alerts into Splunk via HEC. Useful for SOCs running Tracelight as one of many investigation feeds.
Datadog
Tracelight alerts → Datadog events. Use Datadog's monitor language to set up follow-on alerting on Tracelight signals.
Jira
Auto-create Jira issues from high-severity Tracelight alerts. Useful for SOC + investigation teams running case management in Jira.
ServiceNow
Stream Tracelight alerts into ServiceNow as incident records. For enterprise SOCs running ITSM-style alert workflows.
GitHub
Auto-open GitHub issues from Tracelight alerts. Useful for security teams running incident response in Issues + Projects.
Asana
Auto-create Asana tasks from Tracelight alerts + cases. Useful for investigation teams running case management in Asana.
ClickUp
Tracelight events → ClickUp tasks. For teams running case management in ClickUp.
Microsoft 365
Tracelight events into Microsoft 365 — Outlook calendar holds for incidents, OneDrive report archival, Power Automate flows.
Trello
Tracelight events → Trello cards. For investigation teams running Kanban-style case management.
Calendly
Auto-schedule investigator follow-up calls when high-severity alerts fire. Useful for client-facing PI shops.
Generic webhooks
Subscribe any HTTPS endpoint to Tracelight events. HMAC-SHA256 signing. SSRF-safe. Zero glue.
