Receive real-time notifications for security events
Webhooks allow you to receive HTTP POST requests when specific events occur in sent1nels. Use webhooks to integrate with external systems, trigger automated workflows, or send notifications.
incident.created - New security incident detectedincident.updated - Incident status changedincident.resolved - Incident marked as resolvedagent.offline - Agent stopped reportingagent.online - Agent came back onlinethreat.detected - New threat identifiedcompliance.violation - Compliance rule violatedConfigure webhooks via the API or dashboard.
POST /v1/webhooks
Content-Type: application/json
{
"url": "https://your-app.com/webhooks/sent1nels",
"events": ["incident.created", "threat.detected"],
"secret": "your_webhook_secret"
}
POST https://your-app.com/webhooks/sent1nels
X-Sent1nels-Signature: sha256=abc123...
Content-Type: application/json
{
"event": "incident.created",
"timestamp": "2025-01-08T10:30:00Z",
"data": {
"incident_id": "inc_456",
"severity": "high",
"title": "Suspicious Login Attempt"
}
}
Always verify webhook signatures to ensure requests are from sent1nels.
const signature = req.headers['x-sent1nels-signature'];
const payload = JSON.stringify(req.body);
const expected = crypto
.createHmac('sha256', webhookSecret)
.update(payload)
.digest('hex');
if (signature === `sha256=${expected}`) {
// Valid webhook
}