Panel notifications (iContact messages)
Overview
Imunify can deliver generic panel notifications (also referred to as iContact messages) through the hosting panel’s native notification mechanism. These notifications are generated by Imunify and delivered by the panel:
- cPanel/WHM: delivered via cPanel iContact (WHM → Contact Manager)
- Plesk: delivered by the Imunify Plesk extension via Plesk Notifications (Tools & Settings → Notifications / Notification Center)
This mechanism is separate from Imunify’s event notifications configured in Imunify UI (Settings → Notifications) or via imunify360-agent notifications-config. See also: Notifications.
What gets reported
Generic (iContact) notifications are HTML-capable messages with a subject and body provided by the Imunify backend. They typically include security alerts and recommendations, for example:
- malware detected / suspicious activity
- scan not scheduled / scan not running
- CMS security signals (for example, insecure WordPress core or vulnerable themes/plugins)
Each notification has its own backend-defined cooldown (period limit), and the agent enforces it.
Who receives these messages
A notification can be addressed either:
- to the server administrator (panel admin) — when no specific user is provided, or
- to a specific panel user (customer/reseller) — when a target user login is provided by the backend.
User-targeted delivery is controlled by CONTROL_PANEL.generic_user_notifications (default: True).
Licensing
Panel notifications do not require an additional add-on license. They are controlled by a configuration option and are available on supported panels where the delivery channel exists (cPanel/WHM, Plesk).
Requirements
- Imunify360 or ImunifyAV/AV+ installed and running.
- For Plesk delivery: Plesk installed, and the Imunify extension installed/enabled in Plesk.
- For cPanel delivery: cPanel/WHM installed, and WHM Contact Manager configured with at least one destination.
Configuration (Imunify)
The feature is controlled by Imunify configuration keys:
- Config path:
/etc/sysconfig/imunify360/imunify360.config(or a file in/etc/sysconfig/imunify360/imunify360.config.d/) - Keys:
ADMIN_CONTACTS.enable_icontact_notifications(default:True)CONTROL_PANEL.generic_user_notifications(default:True, controls user-targeted delivery)
Enable/disable in YAML
ADMIN_CONTACTS:
enable_icontact_notifications: True
Enable/disable via CLI
Imunify360:
imunify360-agent config update '{"ADMIN_CONTACTS": {"enable_icontact_notifications": true}}'
Disable:
imunify360-agent config update '{"ADMIN_CONTACTS": {"enable_icontact_notifications": false}}'
ImunifyAV/AV+:
imunify-antivirus config update '{"ADMIN_CONTACTS": {"enable_icontact_notifications": true}}'
(Optional) Disable user-targeted delivery
If you want these notifications to go only to the server administrator and never to end users, disable CONTROL_PANEL.generic_user_notifications.
Imunify360 (global):
imunify360-agent config update '{"CONTROL_PANEL": {"generic_user_notifications": false}}'
Imunify360 (for a specific user):
imunify360-agent config update '{"CONTROL_PANEL": {"generic_user_notifications": false}}' --user <username>
ImunifyAV/AV+:
imunify-antivirus config update '{"CONTROL_PANEL": {"generic_user_notifications": false}}'
Plesk: managing delivery with Plesk Notifications
When Imunify runs under Plesk, it relies on the Imunify Plesk extension to dispatch these messages via Plesk notifications.
- Where you see it: in Plesk’s Notification Center, and/or as emails depending on your Plesk notification settings.
- Where you configure delivery: Plesk → Tools & Settings → Notifications (choose recipients and optionally add a custom email address).
Manual test (advanced)
On a server with the Imunify extension installed, run:
echo '{"message_type":"Generic","params":{"subject":"Test Generic","body_html":"<p>Hello from Imunify</p>"},"user":"client_login"}' | sudo /opt/imunify360/venv/share/imunify360/scripts/send-notifications
Payload fields:
message_type: must beGenericparams.subject: notification subjectparams.body_html: HTML body (preferred)params.body/params.text: plain-text fallback (optional)user: Plesk login to receive the message (optional). If omitted, the Admin user is used.
Plesk CLI (optional)
Plesk email notification settings can also be managed via plesk bin notification. See: How to manage Plesk email notifications via CLI.
We recommend sending security-related Imunify notifications to the server administrator (or a dedicated security mailbox) and not to end customers unless you have a clear operational process in place.
cPanel/WHM: delivery via iContact
On cPanel/WHM, Imunify uses cPanel’s iContact system. To manage recipients and channels, use:
- WHM → Home → Server Contacts → Contact Manager
Make sure at least one destination (email/SMS/etc.) is configured there. Imunify only controls whether these messages are generated (via enable_icontact_notifications); delivery is handled by cPanel.



