Async Webhook Execution
Submit a compliance check and receive results via webhook callback. Best for batch processing, background pipelines, and full mode checks at scale.Step 1: Submit the Check
Step 2: Poll for Status (optional)
queued → pending → running → completed | failed | dead
Completed response (includes full report inline):
Step 3: Receive Webhook
When the check completes, ZebraTruth POSTs to yourwebhookUrl:
Webhook Security
- HMAC Signature:
X-ZebraTruth-Signature: sha256=<hmac(secret, body)> - Timestamp:
X-ZebraTruth-Timestamp— reject ifabs(now - timestamp) > 5 minutes - Dedup: Use
eventIdto deduplicate (at-least-once delivery)
Webhook Failure Handling
- 3 retry attempts: 1s, 5s, 25s exponential backoff
- After 3 failures: moved to dead letter queue
- Check failed deliveries:
GET /v1/webhooks/deliveries?status=dead
Error Events
If the check fails, webhook delivers:Queue Priority
Jobs are processed in priority order by tier:- Enterprise (highest)
- Pro
- Starter
- Free (lowest)