Free IDE extension for risk-free vibe coding — keep secrets out of AI.
Protect
POST /api/webhooksReceive real-time notifications for security events — blocked attacks, high-risk detections, policy violations, and system alerts — via signed webhooks with guaranteed delivery.
Complete these steps in order. The dashboard link opens the exact product workspace for this service.
Sign in, select the project you want to protect, then open Webhooks.
Subscribe to specific event types — blocked requests, high-risk detections, rate limit alerts, and more.
Use POST /api/webhooks from server-side code. Keep API keys out of browsers and client bundles.
Run one safe case and one expected-risk case. Confirm the result in Webhooks, then review Guard Logs before enabling the control for production traffic.
Security events need immediate attention. Webhooks enable real-time integration with your existing alerting and incident response systems — Slack, PagerDuty, SIEM, or custom handlers — so your team can respond within seconds, not hours.
A step-by-step breakdown of how Webhooks protects your AI.
Subscribe to specific event types — blocked requests, high-risk detections, rate limit alerts, and more.
Every webhook is cryptographically signed with HMAC-SHA256 so you can verify it came from SoterAI.
Automatic retries with exponential backoff ensure events are delivered even during temporary outages.
Receive payloads for blocked requests, redacted content, rate limit warnings, report ready, and system health alerts.
HMAC-SHA256 signatures for payload verification
Exponential backoff retry with configurable max attempts
Configure different webhooks for different event types
Subscribe only to the events that matter to you
This service is implemented at the application route below. Use the tested SDK and framework guides for copy-paste integration examples.
POST /api/webhooks. API keys must stay server-side. See the REST API guide and related documentation before integrating.