Webhooks
Wire up any alerting system in under 60 seconds.
Nine first-class providers with signature verification, alert correlation, field-level redaction, and replay — all out of the box. Everything else drops into the generic HTTP provider with HMAC-SHA256 or a shared token.
AlertManager
Correlation on by default
Grafana
Native signature verified
Datadog
Monitor webhook integration
Sentry
HMAC-SHA256
PagerDuty
Incidents webhook
GitHub
X-Hub-Signature-256
GitLab
System + project hooks
Stripe
Timestamp anti-replay
Generic HTTP
HMAC or bearer token
What happens after the POST
curl -X POST "https://ops.example.com/api/webhooks/<task_id>" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer <your-token>" \
-d '{"alertname": "HighLatency", "severity": "critical"}'receivers:
- name: veirox
webhook_configs:
- url: https://ops.example.com/api/webhooks/<task_id>
send_resolved: true
http_config:
authorization:
type: Bearer
credentials: <your-token>{
"name": "veirox",
"type": "webhook",
"settings": {
"url": "https://ops.example.com/api/webhooks/<task_id>",
"httpMethod": "POST"
},
"secureSettings": {
"authorization_credentials": "<your-token>"
}
}# repo → Settings → Webhooks → Add webhook
Payload URL: https://ops.example.com/api/webhooks/<task_id>
Content type: application/json
Secret: <shared-secret> # verified via X-Hub-Signature-256
Events: push, pull_request, workflow_run, …# Service → Integrations → Webhook V3
URL: https://ops.example.com/api/webhooks/<task_id>
Headers: X-Webhook-Token: <your-token>
Events: incident.triggered, incident.acknowledged, incident.resolved# HMAC-SHA256 — any source
POST /api/webhooks/<task_id> HTTP/1.1
Host: ops.example.com
Content-Type: application/json
X-Webhook-Signature: sha256=<hex(hmac_sha256(secret, raw_body))>
X-Idempotency-Key: <unique-request-id>
{"event":"cost_spike","service":"payments","delta_pct":240}Enterprise-grade controls — included, not upsold
Routing rules + fan-out
Priority-ordered expressions (payload.alerts[0].labels.severity == "critical") dispatch to different tasks. First-match or fan-out to many. Validated at save time.
Approval-gated dispatch
Flag a rule as requires_approval — matching events open a human Approval instead of running the agent. Operator reviews, then replays to dispatch. Production-safe automations, by default.
PII redaction + purge
Path-glob redaction rules applied at ingest — payload.user.email never touches disk. Per-webhook retention, metadata-only storage, bulk purge for GDPR/DSR requests.
Rate limit + dedupe
Precise sliding-window rate limit per webhook with a Retry-After header. Identical payloads within your dedupe window count as one — no alert storms.
Token rotation + replay
Rotate shared-token or signing secrets with a configurable grace window — old token keeps working while you update integrations. Replay single events or bulk-backfill up to 50 at once.
Stripe replay protection
Timestamp-tolerance verification on Stripe-Signature (t=…,v1=…). Late replays rejected at the edge. Works the same for GitHub, Grafana, Datadog, Sentry.
Live event feed + SSE
Watch events arrive in real time from any provider — filter by status, redact on the fly, or jump straight to the agent session that ran. Debug integrations in the same pane, not another tool.
Test Console + Signature playground
Fire synthetic payloads and watch the full pipeline — or paste a failing request, get the exact reason your 401 happened. Zero-downtime debugging.
Status badge + starter templates
Embed an SVG badge in your runbook READMEs — 24h success rate, public, cache-friendly. Start from curated templates: AlertManager triage, GitHub PR gatekeeper, Stripe event logger.
Security by default
HMAC-SHA256
constant-time comparison, multiple header formats
Timestamp tolerance
configurable replay window per scheme
Per-project isolation
every row is project-scoped — no cross-tenant leaks
Idempotency keys
duplicate delivery never double-dispatches