Webhooks Later

Events

Event	When
`job.completed`	All cells finished
`finding.confirmed`	A finding reaches Confirmed
`finding.human_verified`	A tester confirms or rejects a finding
`budget.80pct`	A job or month reaches 80% of its budget cap
`authorization.expiring`	A Test Authorization expires within 7 days

Payload

{
  "type": "finding.confirmed",
  "id": "evt_01J…",
  "created": "2026-09-24T16:04:12Z",
  "data": { "finding": "f-1042", "job": "j-2041", "severity": "P0", "cells": 14 }
}

Verify signatures

Each delivery carries Altqa-Signature: t=…,v1=…, an HMAC-SHA256 of t + "." + body with your endpoint secret. Reject deliveries older than 5 minutes. Failed deliveries retry with exponential backoff for 24 hours.