Security Penetration Tests
Receive penetration test webhook events
Receives callback payloads from the penetration test provider when a run is updated. Per-run webhook token validation is enforced when handshake state exists.
post/v1/security-penetration-tests/webhook
Query parameters
{"stackTrail":"paths:/v1/security-penetration-tests/webhook:post:parameters:1:schema","oasType":"schema","type":"unknown"}
Per-job webhook token used for handshake validation when callbacks are sent to Comp.
Headers
X-Organization-Idstring
Organization ID (required for session auth, optional for API key auth)
X-Webhook-Tokenstring
Optional webhook token header. Query param webhookToken is also accepted.
X-Webhook-Idstring
Optional provider event identifier used for idempotency detection.
Response
Webhook handled