Send expiry alerts where your team already works

How delivery works

• You get an alert only when a tracked credential is expired or expiring — quiet days send nothing, and quiet nights create no work items.
• One expiring threshold drives every channel: the same setting decides when a credential shows up in email reports, chat alerts, webhooks, and Azure DevOps work items.
• Metadata only: application name, credential name, status, and expiry date. Never secret values or certificate private keys.
• Webhook endpoints must be public HTTPS URLs; the Custom webhook channel is signed with an X-TW-Signature HMAC header so your handler can verify authenticity.
• The Azure DevOps channel needs no tokens — you add the Token Watch enterprise application to your organization like a regular user.
• Email is its own channel, configured separately and available on every plan, including Free.
• The Team plan adds exactly one more channel on top of email — Slack, Microsoft Teams, Azure DevOps, or Custom webhook. The four are mutually exclusive: activating one deactivates whichever is currently on. Email keeps running either way.