Webhooks (Agency Pro)

Set an HTTPS URL in Settings → Notifications. After each monitored scan we send:

{
  "event": "scan.completed",
  "scan_id": "…", "site_id": "…", "domain": "shop.example",
  "score": 72, "baseline": false,
  "new_issues": 2, "regressions": 1, "resolved": 5,
  "journey_broken": ["Add to cart: …"],
  "url": "https://…/app/sites/…", "sent_at": "2026-01-01T00:00:00.000Z"
}

Verify the x-signature: t=<unix>,v1=<hex> header: compute HMAC-SHA256 of <t>.<raw body> with your webhook secret and compare in constant time. Reject timestamps older than 5 minutes. Deliveries time out after 10 seconds and are not retried; the dashboard remains the source of truth.