Custom Webhooks

Build your own integrations with HMAC-signed JSON payloads.

Available now Automation Included, no add-on fee

Connect Custom Webhooks Setup guide

● Events you can subscribe to

eventfires when

finding.created → a new finding is published

finding.updated → severity, status or detail changes

finding.resolved → a finding is closed out

scan.started → an engagement begins

scan.completed → an engagement finishes

asset.discovered → a new asset enters scope

ticket.created → we open a ticket downstream

ticket.updated → that ticket changes state

what it does

Custom Webhooks, wired to your findings

Build custom integrations with any tool in your stack using webhook payloads. Every webhook is HMAC-signed for authenticity verification and delivers structured JSON data about findings, scans, and events. Perfect for connecting to internal tools, SOAR platforms, or custom automation workflows.

HMAC-SHA256 signed payloads for authenticity verification
Structured JSON payloads with full finding details
Configurable event types (finding.created, scan.completed, etc.)
Custom HTTP headers for authentication with your endpoints
Retry logic with exponential backoff for failed deliveries
Webhook delivery logs for debugging and monitoring

setup

Connected in 3 steps

No engineering time on our side and none on yours. Most teams have this running before their coffee goes cold.

Set Endpoint URL

Enter your webhook receiver URL in Workspace > Marketplace > Webhooks.

Configure Events

Select which event types to send: new findings, scan completions, status changes, etc.

Verify Signature

Use the provided signing secret to verify HMAC signatures in your webhook handler.

What you will need

Endpoint URL Where we POST the JSON payload

Secret key Signs every request so you can verify it came from us

Auth header Optional — sent verbatim on each request

Events Pick which of the eight events you want

in practice

How teams run it

SOAR Integration

Feed security findings into your SOAR platform for automated incident response workflows.

Custom Dashboards

Push finding data to your internal BI tools or custom security dashboards.

Ticket Automation

Route findings to any ticketing system not natively supported via webhook-to-ticket middleware.

nearby

Pairs well with

Slack

Push finding alerts and scan summaries to any Slack channel.

Jira

Auto-create Jira tickets from findings with severity-to-priority mapping.

GitHub

Automated code security reviews, secret scanning, and dependency analysis.

Put Custom Webhooks on your findings

Every integration is included with your workspace — there is no add-on fee and no per-seat charge. Connect it from the dashboard, or talk to us first if you want it scoped into an engagement.

Open the dashboard All integrations