Automated Envoy Badge Access Anomaly Alerts
Every hour, WebRun checks Envoy's visitor and badge sign in log against Verkada's door access log, flags anomalies like a badge scanned well after its scheduled visit window, a door entry with no matching Envoy sign in, or a re entry without a fresh check in, and posts security a Microsoft Teams alert naming the badge, the door, and the time so a person can review it.
How do I get alerted to unusual badge access in my building?
Every hour, WebRun checks Envoy's visitor and badge sign in log against Verkada's door access log, flags anomalies like a badge used after its visit window ended, a door entry with no matching sign in, or a re entry without a fresh check in, and messages security in Microsoft Teams with the badge, door, and time to review.
- Mismatched badge activity gets reviewed within the hour, not at month end audit
- Security reviews a named, timed alert instead of raw door logs
- No badge is ever disabled automatically, a person always decides
Built for corporate security teams · facilities teams · IT security · office managers
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
dashboard.envoy.comin a real browser with your saved login - no setup, no API keys. -
1
Envoy - check the visitor and badge sign in log
envoy.com
WebRun opens Envoy to check the visitor and badge sign in log. - Open Envoy and pull the visitor and badge sign in log for the last hour
- Capture each badge's scheduled visit window and assigned areas
- Note anyone whose visit window has already ended
Done when The last hour's expected badge activity is captured with scheduled windows.
-
2
Verkada - compare against the door access log
verkada.com
WebRun opens Verkada to compare against the door access log. - Pull the door access log for the same hour
- Match each door entry to an expected Envoy sign in
- Flag entries with no match, entries after the visit window, and re entries without a new sign in
Done when Every door entry this hour has been matched or flagged as an anomaly.
-
3
Microsoft Teams - alert security to review the anomaly
microsoft.com
WebRun opens Microsoft Teams to alert security to review the anomaly. - Message security naming the badge, the door, the time, and the reason it was flagged
- Never disable the badge or lock a door on its own
- Leave the decision to investigate or revoke access to your security team
Done when Security has this hour's anomalies with enough detail to review each one.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Does it disable a badge or lock someone out?
No. WebRun never disables a badge, locks a door, or revokes access on its own. It only flags the mismatch for your security team, who make and carry out any access decision.
What counts as an anomaly?
A door entry with no matching Envoy sign in, a badge used after its scheduled visit window has ended, or a re entry into the building with no fresh check in recorded. Each reason is named in the alert.
Does this cover employees as well as visitors?
Yes. It checks any badge activity logged in Envoy against the Verkada door log, whether the badge belongs to an employee, a contractor, or a visitor, so the same review applies to everyone.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.