WP Triage is deliberately quiet. Instant mail is for interruptions that deserve it. Everything else waits for one weekly summary.
After each assessment, WP Triage may email you when both of these are true: instant alerts are enabled on the account, and the new result is worth interrupting the week.
Worth interrupting means:
Low and medium findings, routine plugin drift, and issues you have already been notified about do not generate another instant email. The site list and site detail still show the full ranked picture.
Toggle: Settings → Notifications → Instant risk alerts.
The digest is one email on your chosen weekday (app timezone), aimed at a retainer-style review: what changed, what still matters. Enable it and pick the day under the same notifications screen. If you already run a Monday triage pass, set the digest to Friday or Monday — whichever closes your loop. See the agency workflow and maintenance retainers.
Suppressed findings do not drive scores or alerts. If a recurring issue is accepted risk, suppress it instead of training yourself to ignore mail. Guide: suppressing findings.
When a new assessment introduces a new critical-class or known-exploited vulnerability, or when the site score drops by 15 points or more versus the previous assessment. Instant alerts can be turned off in notification settings.
One email on the weekday you choose, covering what changed across the portfolio and which sites still need attention. It is not a dump of every plugin update.
Yes. Instant alerts and the weekly digest are separate toggles under Settings → Notifications. Scoring continues whether mail is on or off.