> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhooks

> Real-time HTTP webhook notifications for findings, scan completions, and SLA events.

Subscribe external services to Snapsec events using real-time HTTP webhooks.

***

## Webhook Security

All webhook payloads include an `X-Snapsec-Signature` header computed using HMAC-SHA256 with your shared webhook secret:

```python theme={null}
import hmac, hashlib

expected_sig = hmac.new(
    webhook_secret.encode(),
    payload_body.encode(),
    hashlib.sha256
).hexdigest()

assert request.headers["X-Snapsec-Signature"] == f"sha256={expected_sig}"
```

***

## Supported Events

* `finding.created`: New vulnerability detected.
* `finding.status_changed`: Status updated (e.g., Active -> Resolved).
* `assessment.started` / `assessment.completed`: Pentest or scan run lifecycle.
* `sla.warning` / `sla.breached`: SLA deadline alerts.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.