API & Tools

Webhooks User webhook endpoints

Register HTTPS URLs to receive eight platform events. Manage endpoints from the dashboard or the REST API under /user/webhooks.

Configure in app API reference

No credit card required · Free API key

REST

CRUD API

Event types

HTTPS

URLs only

Paid plans

Plan

Capabilities

Key features. Everything you need to protect your infrastructure and users.

Seven event types

threat.detected, monitor.alert, report.created, usage.warning, cve.finding.created, case.updated, dataset.stale.

List & get

GET /user/webhooks and GET /user/webhooks/:id

Update & delete

PATCH and DELETE by id.

Per-user secret

whsec_* generated at creation for verifying deliveries.

Plan limits

Max webhooks per user scales with subscription.

Same auth

X-API-KEY Base64 or logged-in session.

Applications

Use cases. How security teams use this tool.

Automation

Drive internal workflows when threats or alerts fire.

SIEM

Forward structured events to your ingest endpoint.

Multi-endpoint

Several webhooks per account within plan limits.

IaC

Provision webhooks via API from Terraform or scripts.

Support

Frequently asked questions.

Example create body?

{"name":"Production","url":"https://hooks.example.com/ism","events":["threat.detected","monitor.alert"]}

Is this incoming Stripe-style?

No — /webhook/stripe is separate (Stripe only). User webhooks are your URLs we POST to.

OpenAPI?

See repo docs and dashboard; full OpenAPI for user routes is expanding.

Failures?

Rows track failure_count; tune endpoints and monitor from the app.

Explore

Related tools.

Streaming (SSE)

Progressive checks

Authentication

X-API-KEY

Account

API keys

Get Started

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

Create free account Contact Sales

No credit card required · Free API key