Notification preferences
The organization sets the baseline; each person narrows it for themselves.
Two layers. An owner or admin decides what the organization sends at all, and every person can then narrow what reaches them personally - by severity, by site, and by whether they want digests.
A personal preference can turn something off for you. It cannot turn on something the organization has disabled, which keeps the organization’s decision meaningful.
Questions
I am getting too much email. What is the first thing to change?
Move everything except critical findings to the digest. Most people find that leaves instant alerts for genuine emergencies only.
Can I unsubscribe entirely?
You can turn off every optional message. Account-security emails - verification, password changes, two-factor - are always sent.
Something here wrong, missing or out of date? Tell us and we will fix the page.