All templates
For IT service desks, support managers & on-call engineers

Catch tickets before they breach SLA

Every hour during working hours, WebRun signs in to ServiceNow, lists open incidents whose response or resolution target is close to expiry, sorts them by priority and time remaining, keeps a Trello board showing the live at-risk queue, and sends the on-call group a WhatsApp alert naming the tickets that will breach first.

  • No credit card
  • Under $0.01 per run
  • Cancel anytime
14,115 templates Safe automation No code
Every hour between 8:00 AM and 6:00 PM WebRun
1 ServiceNow find incidents close to breaching
2 Trello keep the at-risk queue current
3 WhatsApp alert the on-call group
Run a sample
In short

How do I get alerted before a ServiceNow ticket breaches its SLA?

WebRun signs in to ServiceNow every hour, lists open incidents with less than a quarter of their SLA target remaining, and sorts them by priority and time left. It keeps a Trello board mirroring the at-risk queue and sends the on-call group a WhatsApp alert naming the tickets that will breach first.

  • Tickets are escalated before the SLA clock runs out, not after
  • Unassigned incidents are named every hour until someone owns them
  • The at-risk queue lives on a board the whole team can see

Built for IT service desks · support managers · on-call engineers · managed service providers

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens signon.service-now.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    ServiceNow - find incidents close to breaching
    servicenow.com
    WebRun in ServiceNow: find incidents close to breaching
    WebRun opens ServiceNow to find incidents close to breaching.
    • Sign in to ServiceNow and open the incident list filtered to active tickets
    • Read the SLA or response target on each open incident and work out the time remaining
    • Keep the incidents with less than a quarter of their target left, plus anything already breached
    • Capture the number, short description, priority, assignment group, assignee, caller, and time remaining on each
    • Note incidents with no assignee, since those are the ones most likely to breach
    • Read only. WebRun never updates, reassigns, or resolves a ticket

    Done when Every incident close to breaching is listed with its priority, owner, and time remaining.

  3. 2
    Trello - keep the at-risk queue current
    trello.com How to Automate Trello
    WebRun in Trello: keep the at-risk queue current
    WebRun opens Trello to keep the at-risk queue current.
    • Open your support board and keep one card per at-risk incident in the escalation list
    • Put the incident number in the card title and the priority, assignee, and time remaining in the description
    • Move cards between the at risk, breaching soon, and breached lists as the clock runs down
    • Move a card to done when the incident is resolved or its target is reset in ServiceNow
    • Match on the incident number every run so cards are updated instead of duplicated

    Done when The Trello board mirrors the live at-risk queue with no duplicate cards.

  4. 3
    WhatsApp - alert the on-call group
    whatsapp.com How to Automate WhatsApp
    WebRun in WhatsApp: alert the on-call group
    WebRun opens WhatsApp to alert the on-call group.
    • Send the on-call group a short alert naming the tickets that will breach first
    • Give each line the incident number, the priority, the minutes remaining, and the assignee or the group holding it
    • Call out unassigned incidents separately, since they need an owner before anything else
    • Skip the message entirely in an hour where nothing is at risk
    • Message the internal on-call group only. WebRun never contacts the person who raised the ticket

    Done when The on-call group has this hour's breach warning, or no message when nothing is at risk.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
signon.service-now.com
ScheduleRuns automatically on this cadence
Every hour between 8:00 AM and 6:00 PM
DeliveryHow each run's result reaches you
SLA risk queue · Trello
OutputWhat each run produces - A live Trello queue of incidents close to breaching, sorted by time remaining, plus an hourly WhatsApp alert naming the tickets that will breach first.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it update or close tickets in ServiceNow?

No. WebRun reads the incident list and reports what is at risk. It never edits a ticket, never reassigns one, never adds a work note, and never resolves or closes anything. Every ticket action stays with your agents.

Does it contact the person who raised the ticket?

No. The only message it sends is the internal WhatsApp alert to your on-call group, and cards on your own Trello board. Callers hear from a human agent, exactly as they do today.

How close to breach does a ticket have to be?

An incident is at risk when less than a quarter of its response or resolution target remains, and anything already breached is included. You can change that fraction, and unassigned incidents are always called out separately.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.