# Create Your First Rule

Rules are how Resmo audits your integrated resources for security and compliance checks. There are three types of rules, to begin with: managed rules, custom rules, and notification rules.

This guide will show you how to create your first rule step-by-step.

### How to add a custom rule

1. Open your Rules page on Resmo. You'll see a list of managed rules on this page. 

![](https://709615783-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYrzxpMpCQh51K4O99y0o%2Fuploads%2FTRop2PXlIY3bgK5EcfmZ%2Frules-page.png?alt=media\&token=54d0dd75-8925-4a13-b111-ddbc98e3c9f7)

{% hint style="info" %}

* Managed rules comprise common best practices and are maintained by our team.
* Each rule has a Detail page where you can see the overview, result, activity, and suppression of a rule. See [rules](https://resmocom.gitbook.io/product/rules "mention") for details.
  {% endhint %}

2\. Click Add Rule to create a custom rule.

![](https://709615783-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYrzxpMpCQh51K4O99y0o%2Fuploads%2FPYZPQ4vqykrupRxCBvxk%2Fadd-rule.png?alt=media\&token=cac8c815-943b-482a-a152-6dcc5ed68404)

{% hint style="info" %}
Custom rules can be triggered by saved or managed queries. You can define their severities, remediations, and evaluation scripts.
{% endhint %}

3\. Fill in the required metadata fields. Then select queries for your rule. Additionally, if your rule does require custom evaluation logic, you can write it as an expression. 

![](https://709615783-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYrzxpMpCQh51K4O99y0o%2Fuploads%2F8TzsyMuJwDOL42qWNT2N%2Fcustom-rule-page.png?alt=media\&token=08ae6568-5611-4472-9d36-ac997134d2ba)

4\. Hit the Create button when all configurations are done.

### How to add a notification rule

1. Navigate to Settings>Notification Rules.

{% hint style="info" %}
Notification rules alert you about rule breaches through the channels of your choice**,** such as Slack or email. See [Broken link](https://resmocom.gitbook.io/product/guides/broken-reference "mention") for details.
{% endhint %}

2\. Click Add Notification Rule.

3\. Fill in the metadata field for your rule. Then, select severities, integrations, and notification channels. Hit the Create button once you're done.

![](https://709615783-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYrzxpMpCQh51K4O99y0o%2Fuploads%2FB04ZBeaKJN8yArgodkrN%2Fnotification-rule-page.png?alt=media\&token=35f8b363-e1e3-43b8-95a5-35efcda582cf)

{% hint style="info" %}
Tags are there to help you filter your rules. On the other hand, Severities help you get notified only on violations with specific severities so that you avoid alert fatigue.
{% endhint %}

### Support

Contact us via live chat or email us at <contact@resmo.com> for questions and troubleshooting.