Generic Webhooks

Generic webhooks — POSTing every Vygl event to a URL of your choice for SIEM ingestion, custom dashboards, or downstream automation — are on the roadmap. The provider isn’t wired end-to-end today, so the Add Webhook option is disabled in the integrations dialog.

In the meantime, the closest equivalents:

• Slack-formatted webhooks (Slack integration) — works with any tool that accepts Slack-incoming-webhook payloads at https://hooks.slack.com/... URLs.
• Microsoft Teams Workflows (Teams integration) — Adaptive Card delivery to a Power Automate Workflow URL.
• Email (Email integration) — for “email-as-an-API” workflows feeding ticket systems via parsing addresses.
• Direct API polling (REST API reference) — pull GET /api/v1/findings, /scans, and /cve-watch/alerts on a schedule for systems that prefer pull over push.

What we're planning

The shipped version will deliver every supported event (scan_completed, scan_failed, critical_finding, high_finding, cve_critical, cve_high, cve_batch_summary) as a JSON POST with HMAC payload signing, idempotency via stable event IDs, and SSRF-safe URL validation on both Test and delivery paths. The payload contract will be published when the provider ships — until then, the field shape is not stable and shouldn’t be relied on.