Integrations

1. Email alerts use wp_mail and should be backed by SPF, DKIM, and DMARC.
2. Slack uses an incoming webhook URL saved as a protected secret.
3. Generic webhooks receive signed JSON incident events.
4. Discord, PagerDuty, Jira, Linear, GitHub, and Teams are visible as disabled provider foundations until credentials are configured.

Do not paste provider secrets into issue comments, logs, or public pages.