Send rate‑limit security alerts to on-call team before SLAs lapse

Your security search alerts arrive as raw webhooks, causing delayed incident triage and missed SLA acknowledgements. On-call engineers receive parsed incident summaries with investigation links so incidents are acknowledged before the next on-call rotation.