Triage security alerts with AI and route them to Slack

flowchart TD trig(["pulls alerts on a schedule"]):::trigtime s0["pull recent alerts"]:::svc s1["filter below severity threshold"]:::task s2["ai assigns priority and summary"]:::task s3["route alert to slack channel"]:::svc trig --> s0 s0 --> s1 s1 --> s2 gx{"× priority level assigned"}:::gate s2 --> gx p00["send to incident channel"]:::task gx -->|"critical"| p00 p10["send to high priority channel"]:::task gx -->|"high"| p10 p20["send to info channel"]:::task gx -->|"informational"| p20 p00 --> s3 p10 --> s3 p20 --> s3 out[/"prioritized alerts routed to slack"/]:::out pay{{"security team focuses on real threats"}}:::pay s3 --> out out --> pay classDef task fill:#e7f6fe,stroke:#34b8f0,color:#2c2a29 classDef svc fill:#f6f8fa,stroke:#7c8795,color:#2c2a29 classDef mi fill:#e7f6fe,stroke:#0079a8,color:#2c2a29,stroke-width:2px classDef human fill:#fff,stroke:#0079a8,color:#0079a8 classDef store fill:#f6f8fa,stroke:#0079a8,color:#2c2a29 classDef trig fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigtime fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigdata fill:#8ad4f5,stroke:#0079a8,color:#06314c,font-weight:bold classDef gate fill:#fff,stroke:#e8a23d,color:#6b4708,font-weight:bold classDef out fill:#1f9d6b,stroke:#167a53,color:#fff,font-weight:bold classDef pay fill:#06314c,stroke:#021f33,color:#fff