At Box, we are constantly reviewing and applying customer feedback to improve the efficacy and usability of our solutions, and now we are taking your feedback around Shield Threat Protection alerts and upgrading our capabilities to better solve your security challenges. Starting October 13, 2026, we're upgrading how Box Shield communicates threat severity, giving you the insight needed to remediate threats faster and more accurately.
Box Shield threat alerts will now include a new Severity field that automatically categorizes each alert as Low, Medium, High, or Critical. Severity is determined based on the existing Risk Score, so the underlying detection logic stays the same, we're just surfacing that signal in a cleaner, more actionable way. Admins will be able to sort the threat feed based on the new Severity score. With this update, the Alert Priority field will be retired across the Box UI and Shield events, and the Risk Score field will no longer appear in the alert UI. Risk Score will still be included in the alert event payload and remains accessible via the Box event stream, so any integrations or workflows that depend on it will continue to work without changes. We are also updating the format of the Alert ID.
This upgrade will not impact most customers, however, if your team has built integrations or automated workflows that reference the Alert Priority field, you will need to update those to use the new Severity levels before October 13.
This update is available to all organizations with Box Shield. If you have questions or need help preparing for this change, reach out to your account team or contact Product Support.