To get an alert when your organization exceeds the quota, you want to add a detection & response rule, following the example below.
Detection part of the rule:
detect:
- path: event
target: deployment
event: sensor_over_quota
op: exists
Sample response part of the rule that will trigger a detection called "Sensor_Quota_Reached":
respond:
- action: report
name: Sensor_Quota_Reached
You can choose to send an alert to Slack or your ticketing system, or to take another action.