Every webhook
that arrives
gets a receipt.
HookScope sits in front of every endpoint you own. Each delivery gets captured, signature-checked, and filed — so you always know what came in, when, and what happened after.
What happens between sent and delivered
The provider sends it
Stripe, GitHub, Shopify — any provider posts to the unique URL HookScope gives your endpoint, not your server directly.
The signature gets checked
HMAC verified against that endpoint's own signing secret. A forged or tampered request gets flagged, not forwarded.
The event gets filed
The full payload is stored durably. Metadata lands in Postgres and is cached for instant lookups on the dashboard.
It reaches your app
Forwarded to your real endpoint. If delivery fails, HookScope retries with backoff and tracks every attempt.
Every provider lands in the same manifest
Signatures are verified for 40+ providers out of the box. Don't see yours below? Any provider still works — add its signing secret when you're ready, or leave verification off while you wire things up.
What gets logged on every delivery
Real-time capture
Every event is captured the instant it lands on your endpoint — no polling, no batching, no delay.
Full payload inspection
See the complete headers, body, and signature for any event. Search across every field, highlighted and diff-ready.
One-click replay
Resend any event — same payload, same headers — without asking the provider to try again.
Smart alerts
Get told the moment something breaks: failure spikes, latency jumps, missing heartbeats. Routed to Slack, email, or PagerDuty.
Signature verification
HMAC checks for Stripe, GitHub, Shopify, Twilio, and 37 more. Catch a forged request before it reaches your app.
30-day searchable history
Every event stays on file. Filter by status, source, or path — export or replay in bulk.
Before you open an account
Do you store my raw payloads?
Yes — every payload is stored in full and kept for 30 days on the free tier, searchable by status, source, or path.
Will this slow down my webhooks?
No. Events are captured in under 5ms, independent of whether your own server is up or responding slowly.
What happens if my server is down?
HookScope holds the event and retries delivery with backoff. Nothing is dropped while you're offline.
Is this safe to put in front of production traffic?
Each endpoint gets its own signing secret — never a shared one across your account. Signatures are verified before anything reaches your app.
Do I need to install anything?
No SDK, no agent. Point your provider's webhook URL at the one HookScope gives you and it starts capturing immediately.
Point one URL.
We'll take it from there.
No SDK, no agent, no code changes — just a URL that captures everything sent to it.
Free up to 100,000 events a month. No credit card required.