Where do I configure webhooks?

In the app dashboard, or programmatically via GET/POST/PATCH/DELETE https://api.ismalicious.com/user/webhooks with X-API-KEY (Base64) or session.

What can I send when creating a webhook?

POST JSON: { "name": string, "url": "https://…", "events": string[] }. Valid events: threat.detected, monitor.alert, report.created, usage.warning.

Which plans include webhooks?

Webhooks are included on Pro and Enterprise; Free receives HTTP 403 with an upgrade message.

What URL rules apply?

URL must be HTTPS and cannot target localhost or private IPs. A signing secret is generated when the webhook is created.

API & Tools

Webhooks

User webhook endpoints

Register HTTPS URLs to receive platform events. Manage endpoints from the dashboard or the REST API under /user/webhooks.

Configure in app API reference

REST

CRUD API

Event types

HTTPS

URLs only

Pro

Plan

Capabilities

Key Features

Everything you need to protect your infrastructure and users

POST /user/webhooks

Create with name, url, events[].

List & get

GET /user/webhooks and GET /user/webhooks/:id

Update & delete

PATCH and DELETE by id.

Per-user secret

whsec_* generated at creation for verifying deliveries.

Plan limits

Max webhooks per user scales with subscription.

Same auth

X-API-KEY Base64 or logged-in session.

Applications

Use Cases

How security teams use this tool

Automation

Drive internal workflows when threats or alerts fire.

SIEM

Forward structured events to your ingest endpoint.

Multi-endpoint

Several webhooks per account within plan limits.

IaC

Provision webhooks via API from Terraform or scripts.

Support

Frequently Asked Questions

Example create body?

{"name":"Production","url":"https://hooks.example.com/ism","events":["threat.detected","monitor.alert"]}

Is this incoming Stripe-style?

No — /webhook/stripe is separate (Stripe only). User webhooks are your URLs we POST to.

OpenAPI?

See repo docs and dashboard; full OpenAPI for user routes is expanding.

Failures?

Rows track failure_count; tune endpoints and monitor from the app.

Explore

Related Tools

Streaming (SSE)

Progressive checks

Authentication

X-API-KEY

Account

API keys

Get Started

Ready to Get Started?

Rejoignez des milliers d'équipes de sécurité qui utilisent isMalicious pour protéger leur infrastructure.

Commencer Contacter les ventes