Send Panther AI Findings to Slack

Use Panther AI to send Slack messages directly to a Slack channel from within an investigation.

This feature requires a configured Panther Slackbot destination and the Send Notifications permission. It is available as of Panther v1.122.

Overview

Panther AI can send messages directly to a Slack channel from within an investigation. During triage, scheduled runs, or ad-hoc analysis, you can instruct the agent to post alert summaries, threat-hunt findings, daily briefings, or escalation notices to any channel that your Panther Slackbot integration has access to.

Messages are sent from the Panther bot identity and include a View in Panther AI button that links back to the originating conversation, giving your team immediate context without leaving Slack.

This capability is distinct from AI alert triage sync, which automatically posts AI-generated triage summaries as comments in an alert's Slack thread. Sending messages from Panther AI is an on-demand action that you — or a scheduled prompt — can trigger at any point during an investigation. For information on configuring AI alert triage sync, see Managing Alerts in Slack — AI alert triage sync.

Prerequisites

Before Panther AI can send messages to Slack, verify the following:

• A Panther Slackbot destination is configured. The feature uses the Slack Bot integration. If you have not set one up yet, follow the Slack Bot Destination setup guide.

• The Panther bot is invited to the target channel. Even if a channel is configured as a destination, the bot must be a member of the channel to post messages. In Slack, you can run /invite @Panther in any channel you want the agent to be able to post to.

• Your user role or "AI Run As" user role includes the Send Notifications permission. To ensure that Panther AI has a tool available to send Slack messages, check that your role has this permission assigned.

How to use

During any Panther AI conversation — whether you opened it from an alert, a threat hunt, or the AI home page — you can ask the agent to send a message to Slack using natural language.

Example prompts:

• "Send a summary of this alert to #security-investigations."

• "Post a summary of these findings to #soc-alerts and include the risk score."

• "Send a briefing of today's critical alerts to #incident-response."

Panther AI will compose the message and, in interactive sessions, show you the message content for review before sending. You must explicitly confirm or approve the send. The message will not be dispatched without your approval.

Panther AI can also post messages as replies within an existing Slack thread.

Behavior by session type

Session type	Approval required
Interactive (user-initiated)	✅ Yes — user must approve before send
Autonomous (scheduled prompts, auto-triage)	❌ No — sends automatically