Alerts
Understanding alert severity levels
4 min read
Severity is determined automatically
Every alert is assigned one of three levels critical, warning, or info based on what triggered it. There is no setting to change how an alert is classified; severity reflects how serious the underlying issue is, not a preference you configure.
How levels affect what you see first
On the Open and Acknowledged tabs, alerts are sorted critical first, then warning, then info so the most urgent issues are always at the top regardless of when they were raised. The History tab sorts by recency instead, since it is meant as a full timeline rather than a triage list.
Severity versus domain health score
Alert severity is related to, but separate from, a domain's overall health score. A single critical alert (for example, a blacklist listing) can significantly lower a domain's score even while other checks pass the alert and the score both reflect the same underlying issue from different angles.