Help center › System and administration
Alerts
Every alert raised by deterministic detectors: surveillance, unusual access, cross-component anomalies and order health.
At a glance
- Where
- System › Alerts (
/app/alerts) - Who
- Users with review compliance or manage users: Compliance and Admins. Roles and permissions
Try it in the demo A private sandbox firm, no sign-up. Simulated data only.

Filter by kind and status:
| Kind | Raised when |
|---|---|
| Cross-component | Signals from several components together (an unusual account, size and limit at once). |
| Surveillance | Wash trades, spoofing patterns, restricted-list hits (Surveillance). |
| Access | Unusual access: many refusals, sign-ins at odd times, a sudden new pattern. |
| Order health | Stuck and duplicate orders (Order health). |
Open an alert to see what was detected, the suggested next step and the detector details; Draft the narrative, write a note, and Mark reviewed, Escalate or Dismiss. The detectors decide; the AI only writes narratives.
Related articles
Do it with the API
Every action on this screen can also be done by your own systems, under the same permissions. See Authentication to get a token.
- GET
/api/v1/surveillance/alertsSurveillance and anomaly alerts - GET
/api/v1/surveillance/alerts/{id}One alert - POST
/api/v1/surveillance/alerts/{id}/reviewReview an alert (reviewed, dismissed, escalated) with a note
Paper trading only: orders and fills in Vestoris are simulated. Nothing here is investment advice.