---
title: "The organisation's alert policy."
method: GET
path: "/surveillance/policy"
tags: ["surveillance"]
---

# The organisation's alert policy.

`GET /surveillance/policy`

## Request

- Base URL: `https://api.ismalicious.com`
- URL: `https://api.ismalicious.com/surveillance/policy`
- Auth: one of:
  - API key in header `X-API-KEY`
  - HTTP bearer
  - HTTP basic

## Response `200`

OK

- AlertPolicyResponse
  - `policy` AlertPolicyDto, required
    - `chatDestinationIds` string[], required
    - `emailEnabled` boolean, required
    - `emailRecipients` string[], required: Empty = the organisation's OWNER/ADMIN users with a verified address. Every entry passes `contexts::cve::domain::is_notification_email`.
    - `includeDevDependencies` boolean, required
    - `lastDailyDigestAt` string, date-time, nullable
    - `lastWeeklyDigestAt` string, date-time, nullable
    - `locale` string, required: `en` or `fr`.
    - `p1Cadence` 'Immediate' | 'Daily' | 'Weekly' | 'Never', required: `SurveillanceAlertPolicy.p{1,2,3}Cadence`.
    - `p2Cadence` 'Immediate' | 'Daily' | 'Weekly' | 'Never', required: `SurveillanceAlertPolicy.p{1,2,3}Cadence`.
    - `p3Cadence` 'Immediate' | 'Daily' | 'Weekly' | 'Never', required: `SurveillanceAlertPolicy.p{1,2,3}Cadence`.
    - `updatedAt` string, date-time, nullable
    - `webhooksEnabled` boolean, required

## Other responses

- `400`: Invalid request
- `401`: Unauthorized

## Changes

- **2026-10-23** `7c8ce9039cf7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/surveillance/policy/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) - [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/b6f45e6169a7?raw)