Webhooks

Guardhouse webhooks send outbound POST requests to your application when selected Guardhouse events occur.

Webhooks are not System API endpoints. Your application exposes the receiving endpoint, Guardhouse calls it, and you validate the request signature before processing the event.

Webhook Flow

1. Create a webhook subscription in Guardhouse.
2. Store the generated webhook secret securely.
3. Expose an HTTPS endpoint in your application.
4. Validate the X-Hub-Signature header on every delivery.
5. Process the event body.
6. Return a 2xx response when processing succeeds.

Available Guides

• Events
• Setup Webhook
• Signature Validation
• Retries