Skip to content
Notis

Create Better Stack escalation policies from 21risk audits

Move from audit finding to incident ownership without another setup session.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Create Escalation Policy

Tool to create a new escalation policy. use when defining how incidents should escalate across team members.

Why this helps

Urgent compliance findings can sit unassigned while teams debate who should respond first.

  • Creates a response path from an audit decision
  • Reduces manual handoffs during urgent findings
  • Keeps escalation intent visible in Better Stack

Setup

Build it in a few focused steps.

  • 1Connect 21risk and Better Stack in the Notis portal.
  • 2Create an automation named Audit escalation policy builder.
  • 3Tell Notis to create a Better Stack escalation policy from each 21risk webhook payload that contains an approved escalation requirement.
  • 4Choose notis_webhook as the trigger and select a report channel.
  • 5Send one real approved audit finding to test the workflow.

Questions about this workflow

What starts this automation?

An HTTP request carrying a 21risk audit result starts the Notis webhook automation.

Does Notis invent escalation contacts?

No. Include the intended escalation structure in the webhook payload or instruction; missing details are reported.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Better stack. A trigger fires from one place; an action lands in another.

21risk triggers

Better stack actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create Escalation Policy

Tool to create a new escalation policy. use when defining how incidents should escalate across team members.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Heartbeat Group

Tool to create a new heartbeat group. use when you need to organize related heartbeat checks under a single, logical group. example prompt: "create a new heartbeat group named 'backend services'."

ActionInstant

Create Outgoing Webhook Integration

Tool to create a new outgoing webhook integration. use when you need to register an endpoint to receive event notifications from better stack.

ActionInstant

Create Source Group

Tool to create a new source group. use when you have finalized the group name (and optional sort index) and need to organize related log sources under that group.

ActionInstant

Delete Escalation Policy

Tool to delete an escalation policy by id. use when you need to permanently remove an existing escalation policy after confirming its id.

ActionInstant

Delete Source Group

Tool to delete a source group by id. use when you need to permanently remove an existing source group after confirming it is no longer needed.

ActionInstant

Get Heartbeat

Tool to get a single heartbeat by id. use when you need to fetch details of a specific heartbeat.

ActionInstant

Get Heartbeat Availability

Tool to retrieve availability summary for a specific heartbeat. use when you need availability metrics for a heartbeat within an optional date range.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Better stack, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Better stack.