Overview
Webhooks let you route Valimail alerts directly into your own tools and systems, instead of relying solely on email notifications. When an event you've subscribed to occurs, for example, a domain being added, a DMARC policy change, or suspicious sending activity, Valimail sends a signed HTTP POST request containing event details to the endpoint URL you specify. You can use this to pipe alerts into a SIEM, a ticketing system, a chat tool, or any other endpoint that can receive webhook calls.
Each webhook you create can be scoped to specific event types, so you only receive the notifications that are relevant to your workflow.
How to access Webhooks
Click the gear icon in the top navigation bar to open Account Settings.
In the left-hand menu, expand Notifications.
Click Webhooks.
This opens the Webhooks page, where you can see all webhooks configured for the account and add new ones.
Creating a webhook
1. From the Webhooks page, click +ADD WEBHOOK.
2. On the Create Webhook screen, enter a Webhook Name to identify this webhook (for example, the name of the tool it feeds into).
3. Enter the Endpoint URL that should receive the event data.
Once you enter a URL, a Send Test Event link appears, which you can use to confirm your endpoint is receiving requests correctly before finishing setup.
Every request Valimail sends is signed with Valimail's private key. Click View Key next to the signing note to get the public key you'll need to verify that incoming payloads are authentic.
4. Click NEXT.
5. On the Events screen, choose which events should trigger this webhook. Each event has its own toggle, along with a View Payload Example link that shows the JSON structure you'll receive for that event. You can turn on individual events, or click Select all in the top-right corner to subscribe to everything. The DKIM Key Manager, DMARC Policy, Enabled Senders DMARC, Record Configuration Change, Suspicious Sending, and Executive Report alerts require additional selections for the domains or portfolios covered by the alert, thresholds, or cadence.
6. Once you've selected your events, click CREATE WEBHOOK.
Here is a list of available events to choose from:
Event | Notifies you when... |
Domain Added/Deleted | A domain is added to or removed from the account |
MFA Enabled/Disabled | Multi-factor authentication settings change |
SSO Enabled/Disabled | Single sign-on settings change |
New Service Detected | A new sending service is detected in the email traffic |
DKIM Key Manager | A DKIM key needs to be rotated, or is added, edited, or deleted |
DMARC Policy | DMARC policy is changed |
Enabled Senders DMARC | Sender authentication rates change |
Record Configuration Change | DMARC, DKIM, or SPF configuration changes for selected domains |
Suspicious Sending | An unusual amount of unidentified sender traffic is detected from a domain, which may indicate a suspicious sending attack |
Executive Report | A new executive report is available |
Managing an existing webhook
From the Webhooks list, click the ••• menu at the end of a webhook's row to:
1. Edit: update the webhook's name, endpoint URL, or selected events.
2. View History: see delivery activity for that webhook.
3. Enable/Disable Webhook: temporarily turn a webhook on or off without deleting it.
4. Delete Webhook: permanently remove the webhook. You'll be asked to confirm the deletion request.
Clicking into a webhook also opens a detail page showing the Webhook Events count (click it to see exactly which events and configurations are enabled), Created By, Created On, and Latest Activity, along with a History section listing events delivered to that webhook over the last 6 months.
Tip: Use View Key and Send Test Event while setting up a new webhook to confirm both that your endpoint is reachable and that you can verify Valimail's signed payloads before relying on the webhook for production alerts.