All templates
For IT managers, security operations teams & MSPs

Get a weekly read on your Arctic Wolf risk picture

Every Monday, WebRun signs in to Arctic Wolf, reads the open findings and risk items by severity, records this week's counts as a row in Airtable, compares them with last week, and posts a short scorecard to Telegram showing what improved and what got worse.

  • No credit card
  • Under $0.01 per run
  • Cancel anytime
14,115 templates Safe automation No code
Every Monday at 8:00 AM WebRun
1 Arctic Wolf read open findings by severity
2 Airtable record the week's numbers
3 Telegram send the scorecard
Run a sample
In short

How do I track my Arctic Wolf security findings week over week?

WebRun signs in to Arctic Wolf every Monday, reads open findings and risk items by severity along with what opened and closed in the last week, records the numbers as an Airtable row, and posts a Telegram scorecard comparing this week with last so security trends stay visible.

  • The security trend is written down every week instead of remembered
  • Critical and high counts get a direction, not just a number
  • The oldest open finding is named every Monday until it closes

Built for IT managers · security operations teams · MSPs · compliance leads

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens arcticwolf.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Arctic Wolf - read open findings by severity
    arcticwolf.com
    WebRun in Arctic Wolf: read open findings by severity
    WebRun opens Arctic Wolf to read open findings by severity.
    • Sign in to Arctic Wolf and open your dashboard
    • Read the count of open findings and risk items grouped by severity
    • Capture how many were opened and how many were closed in the last seven days
    • Note the oldest still-open item and how many days it has been open
    • List the assets or accounts that appear most often across open items

    Done when This week's open, opened and closed counts are captured by severity.

  3. 2
    Airtable - record the week's numbers
    airtable.com How to Automate Airtable
    WebRun in Airtable: record the week's numbers
    WebRun opens Airtable to record the week's numbers.
    • Open your security tracker base in Airtable
    • Add one row for the week with the date and every severity count
    • Fill the opened and closed columns and the age of the oldest open item
    • Read back last week's row and calculate the change for each severity

    Done when The week has a complete Airtable row and the week-on-week change is calculated.

  4. 3
    Telegram - send the scorecard
    telegram.org How to Automate Telegram
    WebRun in Telegram: send the scorecard
    WebRun opens Telegram to send the scorecard.
    • Post the scorecard to your security Telegram group
    • Lead with the critical and high counts and the arrow against last week
    • Name the oldest open item and its age
    • Keep it to a screen so it is read on a phone, and link nothing outside your allowlist

    Done when The team has this week's Arctic Wolf scorecard in Telegram.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
arcticwolf.com
ScheduleRuns automatically on this cadence
Every Monday at 8:00 AM
DeliveryHow each run's result reaches you
Weekly risk scorecard · Telegram
OutputWhat each run produces - An Airtable row per week with open, opened and closed counts by severity, plus a Telegram scorecard showing the week-on-week direction.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it close or dismiss findings?

No. WebRun only reads your Arctic Wolf dashboard. It never closes, dismisses, reassigns or comments on a finding, so the security record stays exactly as your team left it.

Who sees the scorecard?

Only your internal Telegram group and your Airtable base. The scorecard carries counts and ages, not customer data, and nothing is emailed, posted publicly or shared outside your team.

What if the numbers barely moved?

The scorecard still goes out with a flat arrow, which is the point of a weekly trend. A week with no movement on a critical item is itself worth seeing, and the oldest open item is always named.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.