An HTTP action step calls an endpoint you control as part of the policy: restart a service, scale a group, trigger a runbook. Follow it with a condition check to see whether it worked, and only page a person if it did not.
Hesklo does not need access to your infrastructure. It calls a URL you already control, which keeps the blast radius on your side of the line.
Hit an internal endpoint that restarts the process that has stopped responding. The most common first automation and often the only one needed.
Call your platform or provider API to add capacity when a service starts failing under load rather than because it crashed.
Kick off an existing automation in whatever tool already holds it, so the logic stays where your team maintains it.
Promote a standby or switch traffic by calling the endpoint that already does it manually today.
Run the remediation you would run by hand at 3am, at the moment it is needed instead of an hour later.
Push the event into your own tooling when the right response is a system change rather than a message.
An action that fires blindly is worse than no action. The canvas gives you the pieces to make it conditional and verifiable.
Put a wait step in front so the action only runs if the service has genuinely been down for a while, not on a transient failure.
Run a live probe after the action and branch on the result, so the policy knows whether the fix actually worked.
The false path from that check is where a human belongs. They are paged with the knowledge that the automatic fix was already tried.
A log step writes to the monitor timeline, so the incident history shows the action fired and what followed it.
Fire once per incident for something like a restart. Fire on every check only when the action is genuinely idempotent.
The webhook destination supports an optional bearer token, so the endpoint you expose does not have to be open to anyone.
Draw an action step, verify it with a condition check, and only involve a person when the automation runs out of ideas.