Webhook Events

If the webhook_url attribute is present, it will be used to notify the partner of certain events. Event data will be sent as a POST request to the webhook_url. The optional webhook_authentication_attributes.account and webhook_authentication_attributes.password partner attributes can be used to authenticate the request using basic authentication.

IP Addresses

Webhook events originate from the following Sectigo Web Security Platform IP addresses. If you have a firewall or intrusion detection system monitoring your endpoint, we recommend whitelisting these IP addresses to ensure uninterrupted communication between our systems.

54.236.233.46
54.236.233.28
54.174.91.34
54.174.153.212
54.174.115.171
54.236.209.91

Events

Webhooks will be sent for the following events:

Name	Description
database_backup_restore_state_changed	The `target` field will identify the `Database` for which the restore state has been changed. The `body` will include the previous and current restore state.
database_backup_zip_download_available	The `target` field will identify the `Database` and the `body` will contain a link to the zip download that was requested.
user_create	The `target` field will identify the `User` created, and the `body` will contain the user's attributes.
user_login_link	The `target` field will identify the `User` created, and the `body` will contain a one-time use login link.
user_reset_password	The `target` field will identify the `User` created, and the `body` will contain the new temporary password.
website_accelerate_enabled	The `target` field will identify the `Website` for which the CDN service has been enabled. The `body` will include connectivity details for the services provisioned.
website_backup_change_alert	The `target` field will identify the `Website` and the `body` will contain details about the file changes detected during the backup.
website_clean_enabled	The `target` field will identify the `Website` for which the remediation service has been enabled.
website_dnssec_rotation_complete	The `target` field will identify the `Website` for which the DNSSEC DS record rotation has completed. The `body` will contain the new DS record.
website_dnssec_rotation_start	The `target` field will identify the `Website` for which the DNSSEC DS record rotation has started. The `body` will contain the new DS record.
website_firewall_enabled	The `target` field will identify the `Website` for which the WAF service has been enabled. The `body` will include connectivity details for the services provisioned.
website_malware_issue_fixed	The `target` field will identify the `Website` and the `body` will contain details about the issues remediated.
website_malware_issue_found	The `target` field will identify the `Website` and the `body` will contain details about the issues detected.
website_monitor_enabled	The `target` field will identify the `Website` for which the monitoring service has been enabled.
website_restore_state_changed	The `target` field will identify the `Website` for which the restore state has been changed. The `body` will include the previous and current restore state.
website_zip_download_available	The `target` field will identify the `Website` and the `body` will contain a link to the zip download that was requested.

Request Attributes

Name	Description
id	The ID of the webhook
event	The name of the event which caused the webhook.
target	The resource the webhook is referring to.
body	The array or object content of the webhook message.
partner	The partner account associated with this webhook.

Example Request Body:

{
  "id": 123456,
  "event": "user_create",
  "target": {
    "type": "User",
    "id": 123456
  },
  "body": {
    "user": {
      "id": 123456,
      "name": "John Doe",
      "email": "[email protected]",
      "...": "..."
    }
  },
  "partner" {
    "id": 1
  }
}