Alerts are the basic unit of information for cybersecurity defense which are used by security teams to make critical real-time decisions. Every security layer or product can generate alerts, essentially a way to tell a human operator that some threshold or policy has been breached.

Without them, defenders would be blind, forced back to security based on static, restrictive policies or assumptions.