Webhook Forwarding¶
Webhook integrations can send selected security events to automation or alerting systems.
Recommended payload fields¶
{
"timestamp": "2026-01-01T00:00:00Z",
"component": "core",
"action": "BLOCK",
"module": "waf",
"rule_id": "waf_sqli_union_select",
"host": "www.example.com",
"path": "/login",
"request_id": "example-request-id"
}
Best practices¶
- Do not forward secrets.
- Use signed webhooks where supported.
- Rate-limit webhook delivery.
- Include request IDs for correlation.