Operations Updated May 18, 2026

Webhooks API

Register webhook destinations for high-risk RequestGuard assessment events.

Webhooks deliver high-risk assessment notifications asynchronously. They never block the customer-facing assessment response.

Endpoints

POST /webhooks
GET /webhooks
PATCH /webhooks/{id}
DELETE /webhooks/{id}

Authentication is required.

Create Webhook

{
  "name": "Security alerts",
  "url": "https://example.com/requestguard/webhook",
  "event_types": ["high_risk_assessment"]
}

Delivery

Webhook handlers should return a 2xx status quickly and process heavy work asynchronously. Store the RequestGuard request ID from the payload so the event can be correlated with /events.