Webhooks

Subscribe to events. Deliveries are signed, retried with backoff and idempotent.

Event types

  • ·lead.converted
  • ·assessment.completed
  • ·proof.generated
  • ·install.validated
  • ·monitor.alert
  • ·integration.status_changed

Signature

Each delivery carries an HMAC signature header computed over the raw body with your endpoint secret. Verify it before trusting the payload.

Retry / backoff

Failed deliveries (non-2xx or timeout) are retried with exponential backoff. After the final attempt the event moves to a dead-letter state you can inspect.

Idempotency

Every delivery has a stable event id. Treat handlers as idempotent: the same event id may arrive more than once after a retry.

Example payload

{
  "id": "evt_...",
  "type": "proof.generated",
  "createdAt": "2026-06-18T00:00:00Z",
  "data": { "assessmentId": "...", "domain": "example.com" }
}
Security & TrustBoundariesPricing