Skip to main content
API & Tools

Webhooks User webhook endpoints

Register HTTPS URLs to receive eight platform events. Manage endpoints from the dashboard or the REST API under /user/webhooks.

Configure in appAPI reference

No credit card required · Free API key

REST

CRUD API

0

Event types

HTTPS

URLs only

Pro

Plan

Capabilities

Key features. Everything you need to protect your infrastructure and users.

Eight event types

threat.detected, monitor.alert, report.created, usage.warning, cve.finding.created, cve.finding.status_changed, case.updated, dataset.stale.

List & get

GET /user/webhooks and GET /user/webhooks/:id

Update & delete

PATCH and DELETE by id.

Per-user secret

whsec_* generated at creation for verifying deliveries.

Plan limits

Max webhooks per user scales with subscription.

Same auth

X-API-KEY Base64 or logged-in session.

Applications

Use cases. How security teams use this tool.

Automation

Drive internal workflows when threats or alerts fire.

SIEM

Forward structured events to your ingest endpoint.

Multi-endpoint

Several webhooks per account within plan limits.

IaC

Provision webhooks via API from Terraform or scripts.

Support

Frequently asked questions.

Example create body?

{"name":"Production","url":"https://hooks.example.com/ism","events":["threat.detected","monitor.alert"]}

Is this incoming Stripe-style?

No — /webhook/stripe is separate (Stripe only). User webhooks are your URLs we POST to.

OpenAPI?

See repo docs and dashboard; full OpenAPI for user routes is expanding.

Failures?

Rows track failure_count; tune endpoints and monitor from the app.
Explore

Related tools.

Streaming (SSE)

Progressive checks

Authentication

X-API-KEY

Account

API keys

Get started

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

Get StartedContact Sales

No credit card required · Free API key