curl --request POST \
--url http://localhost:3333/v1/security-penetration-tests/webhook \
--header 'X-API-Key: <api-key>'Receives callback payloads from the penetration test provider when a report is updated. Per-run webhook token validation is enforced when handshake state exists.
curl --request POST \
--url http://localhost:3333/v1/security-penetration-tests/webhook \
--header 'X-API-Key: <api-key>'API key for authentication
Organization ID (required for session auth, optional for API key auth)
Optional webhook token header. Query param webhookToken is also accepted.
Optional provider event identifier used for idempotency detection.
Webhook handled
Was this page helpful?