1. Home
2. Guides
3. Next-Gen WAF
4. Using the Next-Gen WAF
5. Integrations (alerts)

Our generic webhooks integration (alert) allows you to subscribe to notifications for select Next-Gen WAF activity types.

Adding a webhook integration (alert)

To add a webhook integration (alert), complete the following steps:

Notifications format

Notifications are sent with the following format:

{
  "created": "2024-02-09T21:08:21.31644377Z",
  "type": "flag",
  "payload": {
      "ID": "abcde123456789",
      "CorpID": "123456789abcde",
      "SiteID": "987654321fedcba",
      "Scope": "site",
      "Slug": "site.example",
      "Name": "example",
      "Description": "Webhook integration for Example site",
      "CreatedBy": "admin@example.com",
      "CreatedByID": "edcba987654321",
      "Created": "2024-02-09T21:08:21.31644377Z",
      "Updated": "2025-01-07T21:06:31.50725289Z",
      "ResourceID": "ASDFghjkl123456789"
  },
  "link":"dashboard link to event"
}

X-SigSci-Signature header

All requests sent from the generic webhook integration (alert) contain a header called X-SigSci-Signature. The value is an HMAC-SHA256 hex digest hashed using a signing key generated when the generic webhook was created.

To rotate the signing key, complete the following steps:

Verification is done by creating an HMAC-SHA256 hex digest of the generic webhook payload using the signing key and comparing the result to the value of the X-SigSci-Signature header.

X-SigSci-Signature header verification example code

The examples show header verification code for X-SigSci-Signature.

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
)

// CheckMAC reports whether messageMAC is a valid HMAC tag for message.
func CheckMAC(message, messageMAC, key []byte) bool {
    mac := hmac.New(sha256.New, key)
    mac.Write(message)
    expectedMAC := mac.Sum(nil)

    return hmac.Equal(messageMAC, expectedMAC)
}

func main() {
    key := []byte("[insert signing key here]")

    h := "[insert X-SigSci-Signature value here]"

    json := []byte(`[insert JSON payload here]`)

    hash, err := hex.DecodeString(h)
    if err != nil {
        log.Fatal("ERROR: ", err)
    }

    ok := CheckMAC(json, hash, key)

    fmt.Println(ok)
}

Activity types

When setting up a webhook integration (alert) in the Next-Gen WAF control panel, you can select from the following activity types:

Related content

• Next-Gen WAF API documentation