Configuring Webhooks

Webhooks are a powerful tool to enable real-time, event-driven updates from our platform directly to your integrated applications.

Where to find them

1. Navigate to Settings.
2. Select Integrations.
3. Click on Webhooks.

Setting up a webhook

Creating a new webhook requires defining where the data goes and how to secure it. You will need to provide a URL (destination endpoint) and a Secret (shared key).

Request format

All requests sent from our platform are HTTP POST requests with a standard JSON body. The body always contains the event type and your secret key:

{"type": "<webhook_type>", "secret": "<secret>"}

Initial configuration test

When you save a new webhook, we immediately send a test request (ping) to confirm your URL is active and accessible:

{"type": "ping", "secret": "<secret>"}

Finding notifications

A request is sent automatically when a new finding has a severity of medium or higher:

{
  "type": "finding",
  "secret": "<secret>",
  "finding": {
    "title": "<title>",
    "severity": "<severity>",
    "url": "<url to finding>"
  }
}

Monitoring your webhook

In the same location where you set up your webhook (Settings → Integrations → Webhooks) you can view a full history of all requests and responses triggered.