Use Slack + Nanitor To Make Cybersecurity More Visible for Everyone

Cybersecurity too often lives behind locked doors. Dashboards are hidden away in specialized tools, and only a handful of people know the status at any given time. But awareness of security risks shouldn’t be limited to the IT department.

By connecting Nanitor with Slack, you can bring daily cybersecurity updates directly into the place where work happens. That means not just IT, but also legal, compliance, and management teams can stay informed — without needing to log into another platform or chase down reports.

Why Slack?

Slack has become a standard workplace tool. Over 35 million people use Slack every day, making it one of the most common ways teams communicate and collaborate. Security teams are no exception: many already use Slack to discuss incidents, share intelligence, and coordinate responses.

If your company lives in Slack, it’s the natural place to keep cybersecurity visible too. The result? Everyone stays on the same page, and conversations about risk happen in the same flow as day-to-day work.

Nanitor + Slack: Integration Basics

Nanitor integrates directly with Slack so you can receive notifications where your team already collaborates. This ensures updates aren’t siloed in dashboards or buried in email threads.

You can find the step-by-step setup guide here: How do I receive Nanitor notifications on Slack?

Why We Built a Daily Summary at Nanitor

At Nanitor, we don’t just provide a platform — we use it ourselves every day. We are ISO 27001 certified, which means our operations follow a structured Information Security Management System (ISMS). This isn’t just a certificate on the wall; it’s a practical framework for managing risk.

As part of our controls (such as A.5.7, A.8.7, A.8.8), we leverage Nanitor to support our own threat intelligence and vulnerability management programs. We apply a Continuous Threat Exposure Management (CTEM) methodology to continuously assess our entire technology estate.

To make this data actionable, we track key ISMS metrics, including:

• Overall Health Score: a risk-prioritized score that gives us a high-level view of our security posture.
• Number of P0 Issues: a count of critical vulnerabilities and misconfigurations that need immediate attention.

A common question we get is why we chose to build a custom script instead of relying only on Nanitor’s native Slack integration. The answer is simple: purpose.

• The built-in integration is excellent for real-time alerting — notifying a channel the moment a new issue appears.
• But for this use case, we needed a daily summary dashboard to keep the entire team aligned.

That’s where the Nanitor Public API gave us the flexibility to pull exactly the metrics we wanted and format them into a concise daily report. The result is a single Slack message each morning that keeps everyone — from engineers to management — in the loop.

Beyond Notifications: The Power of Daily Summaries

How to Build a Daily Summary

I shared a detailed walkthrough of how to build a custom daily security summary in Slack, powered by Nanitor, over at Command.is.

That article is for the hands-on builders. It explains exactly how to set up an automated Slack dashboard with Nanitor data — no manual work required.

This post is about the value: summaries bring cybersecurity into the open, making it part of the conversation for your entire team.

Why It Matters

When your daily security update appears in Slack:

• IT teams don’t have to chase down dashboards.
• Legal and compliance teams gain awareness that helps in audits.
• Leadership sees that security is an ongoing practice, not a black box.
• The entire organization treats cybersecurity as a shared responsibility.

Instead of security being something that happens behind the scenes, it becomes part of the daily rhythm of work.

Getting Started

If you’d like to try it out, start with Nanitor’s built-in Slack integration: Receive Nanitor notifications on Slack.

From there, you can expand into daily summaries, like the example I shared on Command.is.

We hope this helps your security, audits, and leadership teams be more aware of cybersecurity — and go beyond the idea that security is just IT’s job.