Configure Webhooks

Webhooks allow you to send alert notifications to any external URL, such as your own monitoring systems, automation platforms, or custom integrations.

Requirements

Webhooks are available on the Pro plan and above.

Create a Webhook

Go to Settings > Alerts
Scroll to the Webhooks section
Click on Add Webhook
Enter the destination URL and a name for the webhook
Save the configuration

A secret key is automatically generated for each webhook. You can use this secret to verify the authenticity of incoming requests.

Webhooks receive all alert event types automatically. There is no option to select specific event types when creating a webhook.

Limits

Maximum 5 webhooks per organization
Webhooks are automatically disabled after 10 consecutive delivery failures. You can re-enable a disabled webhook from the settings page after resolving the issue.

Payload Format

DMARC Examiner sends an HTTP POST request with the following JSON format:

{
  "event": "dmarc_fail",
  "domain": "yourdomain.com",
  "timestamp": "2024-01-15T10:30:00Z",
  "data": {
    "severity": "critical",
    "details": "..."
  }
}

Event Types

All five alert types are delivered to every active webhook:

Event	Description
`dmarc_fail`	Messages failed DMARC authentication
`new_sender`	New IP detected sending email for your domain
`volume_spike`	Unusual increase in email volume
`dns_change`	DNS records for your domain were modified
`compliance_drop`	DMARC compliance rate dropped

Security

Each webhook request includes an X-DMARC-Signature header with an HMAC-SHA256 signature. You can verify this signature using the secret shown in the webhook configuration to ensure the request came from DMARC Examiner.