> For the complete documentation index, see [llms.txt](https://resmocom.gitbook.io/product/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://resmocom.gitbook.io/product/guides/create-your-first-rule.md).

# Create Your First Rule

Rules are how Resmo audits your integrated resources for security and compliance checks. There are three types of rules, to begin with: managed rules, custom rules, and notification rules.

This guide will show you how to create your first rule step-by-step.

### How to add a custom rule

1. Open your Rules page on Resmo. You'll see a list of managed rules on this page. 

![](/files/ihWqB7Hg0Kncx0wfijtR)

{% hint style="info" %}

* Managed rules comprise common best practices and are maintained by our team.
* Each rule has a Detail page where you can see the overview, result, activity, and suppression of a rule. See [Rules](/product/rules/rules.md) for details.
  {% endhint %}

2\. Click Add Rule to create a custom rule.

![](/files/dJh5p4t18kuTDaj2LTYJ)

{% hint style="info" %}
Custom rules can be triggered by saved or managed queries. You can define their severities, remediations, and evaluation scripts.
{% endhint %}

3\. Fill in the required metadata fields. Then select queries for your rule. Additionally, if your rule does require custom evaluation logic, you can write it as an expression. 

![](/files/RBIFl669AoD09XDEJcfo)

4\. Hit the Create button when all configurations are done.

### How to add a notification rule

1. Navigate to Settings>Notification Rules.

{% hint style="info" %}
Notification rules alert you about rule breaches through the channels of your choice**,** such as Slack or email. See [Broken mention](broken://pages/6IoXOQ5S0atrxwyBRBkA) for details.
{% endhint %}

2\. Click Add Notification Rule.

3\. Fill in the metadata field for your rule. Then, select severities, integrations, and notification channels. Hit the Create button once you're done.

![](/files/ohGUAedX5bYv1LuLcqJ0)

{% hint style="info" %}
Tags are there to help you filter your rules. On the other hand, Severities help you get notified only on violations with specific severities so that you avoid alert fatigue.
{% endhint %}

### Support

Contact us via live chat or email us at <contact@resmo.com> for questions and troubleshooting.