Legacy Mend UI - Email Notifications for New Alerts

The new alert email notification will be sent to the assigned groups or individuals when there’s a new security alert created for a product or project.

This article explains when the notification emails are expected to be sent and what to do if you don’t receive the email.

Mend automatic sync process

The Mend security index database will run the sync process with the application every 6 hours. The last time and date for this process can be viewed as “Last vulnerabilities update” at the bottom of the UI:

This process will ensure the application creates a new alert if a new security vulnerability is identified for an existing library in your inventory and will send the email notification.

Newly scanned project

The sync process can also be triggered every time when a new scan is performed, so any new alert created after the scan will send the email notification immediately.

Recalculate the alert

In case a new CVE is added for a library but failed to create a new alert due to various reasons, recalculating alerts can ensure to run the sync process immediately and update/create security alerts. This action can be performed by the organization admins as the following steps:

1. Click the Admin tab in the top right of the application

2. Under Settings, click Alerts

3. Click Recalculate Alerts

The process of recalculating the alert can take up to a couple of hours to complete (depending on the inventory size of your organization), so please only click the button ONCE and refresh the product/project page to see the changes.

Once the recalculation is completed, the email notification will be sent for any new alerts created during the process.