Skip to content
Per-pair page

Connect Slack to TheHive in two minutes.

Real-time triggers from Slack, ready-made actions in TheHive. Filter, transform, and route without writing a line of code.

Trigger app
Slack as the trigger

Workflows fire when something happens in Slack.

See all 13 triggers →
Action app
TheHive as the action

Workflows do something in TheHive, instantly.

Both directions

Pick the way that fits your stack.

Pair pages are mirrored. Each direction gets its own dedicated page.

SlackTheHive

When something happens in Slack, do it in TheHive.

13 Slack triggers wired to 3 TheHive actions. Most-used pairing: App Home OpenedCreate Alert.

TheHiveSlack

Or fire it the other way around.

2 TheHive triggers wired to 45 Slack actions downstream.

See TheHiveSlack
Popular pairings

Common Slack → TheHive workflows.

Pick a pairing to set it up in two minutes. Each one is a fully editable recipe.

Showing 9 of 39 combinations
When app home opened in Slack, create alert in TheHive.

Fires when a user opens your Slack app's Home tab or DM. Useful for refreshing the Home view, lazy-loading user-specific data, or tracking app engagement.

When app home opened in Slack, create case in TheHive.

Fires when a user opens your Slack app's Home tab or DM. Useful for refreshing the Home view, lazy-loading user-specific data, or tracking app engagement.

When app home opened in Slack, list alerts in TheHive.

Fires when a user opens your Slack app's Home tab or DM. Useful for refreshing the Home view, lazy-loading user-specific data, or tracking app engagement.

When app mentioned in Slack, create alert in TheHive.

Fires when your Slack app is mentioned in a message. The standard hook for chatbots that answer when summoned with @your-app.

When app mentioned in Slack, create case in TheHive.

Fires when your Slack app is mentioned in a message. The standard hook for chatbots that answer when summoned with @your-app.

When app mentioned in Slack, list alerts in TheHive.

Fires when your Slack app is mentioned in a message. The standard hook for chatbots that answer when summoned with @your-app.

When new channel in Slack, create alert in TheHive.

Fires when a new Slack channel is created in the workspace. Useful for auto-adding the bot, welcome messages, or governance audit logs.

When new channel in Slack, create case in TheHive.

Fires when a new Slack channel is created in the workspace. Useful for auto-adding the bot, welcome messages, or governance audit logs.

When new channel in Slack, list alerts in TheHive.

Fires when a new Slack channel is created in the workspace. Useful for auto-adding the bot, welcome messages, or governance audit logs.

How it works

Connect Slack and TheHive in five steps.

No code, no glue, no half-day setup. Each step is one click.

  1. 1
    Connect
    Authorize Slack and TheHive

    Open Tiny Command, authorize Slack and TheHive once each. Both connections are available to every workflow on your account.

  2. 2
    Trigger
    Pick a Slack trigger

    Drop the Slack → App Home Opened trigger onto the canvas. Tiny Command auto-registers the webhook.

    POST /v1/webhooks/slack.trigger-app-home-opened
  3. 3
    Transform
    Add a filter or AI step

    Optionally add a Filter node ("subject contains URGENT") or an AI step ("classify intent") between trigger and action.

  4. 4
    Action
    Add the TheHive action

    Drop the TheHive → Create Alert action below it. Map fields from the Slack payload into the TheHive inputs.

    thehive.create-alert
  5. 5
    Publish
    Publish and forget

    Hit Publish. Tiny Command runs it in production from second one. Watch the run-log fill up.

FAQ

Questions about Slack + TheHive.

How long does it take to connect Slack and TheHive on Tiny Command?
Under two minutes. Authorize Slack and TheHive once each, drop the Slack trigger and TheHive action onto a workflow canvas, map a couple of fields, and publish. No code, no glue.
Is the Slack ↔ TheHive integration real-time?
Yes. Both Slack and TheHive expose webhooks, so events from one fire workflows in the other within seconds rather than on a polling interval.
Can I filter or transform data between Slack and TheHive?
Yes. Add a Filter node to only pass through matching events, a Switch node to branch by value, or an AI / Code node to transform payloads before they hit TheHive.
What Slack events can trigger a TheHive workflow?
Any of the 13 Slack triggers, including "App Home Opened". Each fires in real time when the matching event happens in Slack.
Do I need a paid plan to use Slack with TheHive?
No. There's a free tier that covers most Slack+TheHive use cases without a credit card. Paid plans unlock higher run volumes and team features when you outgrow it.
What if I want TheHive → Slack instead?
Build it the same way, in reverse. There's a dedicated /integrations/thehive/with/slack page with the reverse-direction triggers and actions.
Related

Other apps that pair well with Slack.


Wire Slack to TheHive in 2 minutes.

Free tier available. No credit card. No onboarding call.