diff --git a/public/app/features/alerting/unified/components/RuleNotificationSection.tsx b/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
index 59c755fe3e4..7465eae276a 100644
--- a/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
+++ b/public/app/features/alerting/unified/components/RuleNotificationSection.tsx
@@ -245,7 +245,7 @@ export function RuleNotificationSection() {
                   try {
                     const url = new URL(value);
                     // Reject dangerous URL schemes
-                    if (url.protocol === 'javascript:' || url.protocol === 'data:') {
+                    if (url.protocol === 'javascript:' || url.protocol === 'data:' || url.protocol === 'vbscript:') {
                       notifyApp.error(
                         t(
                           'alerting.simplified.notification.runbook-url.invalid-protocol',