Security Penetration Tests
Receive penetration test webhook events
Receives signed JSON events from Maced. Signature is verified against MACED_WEBHOOK_SIGNING_SECRET using the SDK's verifyMacedWebhook helper.
post/v1/security-penetration-tests/webhook
Headers
X-Organization-Idstring
Organization ID (required for session auth, optional for API key auth)
X-Maced-Signaturestring required
HMAC signature header set by Maced (format: t=...,v1=...)
Response
Webhook handled