🪝 HookSniff

The webhook infrastructure for developers.

HookSniff is an open-source webhook delivery platform built in Rust and Next.js. It handles sending, receiving, retrying, and monitoring webhooks — so you can focus on building your product.

🌐 Live: hooksniff.vercel.app · 📖 Docs: hooksniff.vercel.app/docs

Webhooks are the backbone of modern integrations, but building reliable webhook infrastructure is hard. HookSniff gives you:

• Reliable delivery — Automatic retries with exponential backoff and jitter. Failed deliveries go to a dead letter queue, never lost.
• Standard Webhooks — HMAC-SHA256 signatures with whsec_ secrets, fully compliant with the Standard Webhooks specification.
• Smart routing — Round-robin, failover, weighted, and random strategies with automatic fallback URLs.
• FIFO ordering — Guaranteed ordered delivery with sequence numbers for event-sourced systems.
• Real-time visibility — SSE streaming, WebSocket updates, and a full analytics dashboard.
• Cortex AI — ML-powered anomaly detection, auto-healing, drift detection, and predictive monitoring.
• 11 SDKs — Official clients for Node.js, Python, Go, Rust, Java, Kotlin, Ruby, PHP, C#, Elixir, and Swift. Each in its own repo under servetarslan02.

# Clone
git clone https://github.com/servetarslan02/HookSniff.git
cd HookSniff

# Copy environment config
cp .env.example .env

# Start everything (PostgreSQL + API + Worker + Dashboard)
make local

API runs on http://localhost:3000 Dashboard runs on http://localhost:3001

See docs/DEPLOYMENT.md for a complete guide to deploying HookSniff on Google Cloud Run.

# Register
curl -X POST https://hooksniff-api-499907444852.europe-west1.run.app/v1/auth/register \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "password": "your-password"}'

# Create endpoint
curl -X POST https://hooksniff-api-499907444852.europe-west1.run.app/v1/endpoints \
  -H "Authorization: Bearer hr_live_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://your-app.com/webhook"}'

# Send webhook
curl -X POST https://hooksniff-api-499907444852.europe-west1.run.app/v1/webhooks \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"endpoint_id": "YOUR_ENDPOINT_ID", "event": "order.created", "data": {"order_id": "12345"}}'

HookSniff/
├── api/               # Rust Axum API server
│   ├── src/
│   │   ├── routes/    # API endpoints (auth, webhooks, billing, etc.)
│   │   ├── billing/   # Polar.sh, iyzico, Stripe integrations
│   │   ├── fifo/      # FIFO ordered delivery
│   │   ├── throttle/  # Per-endpoint throttling
│   │   ├── ws/        # WebSocket handler
│   │   └── ...
│   └── migrations/    # PostgreSQL migration scripts
├── worker/            # Background worker (retry + delivery)
├── dashboard/         # Next.js 16 dashboard + landing page
├── sdks/              # SDK source (Node.js in-repo, others in separate repos)
├── cli/               # CLI tool
├── portal/            # Embeddable portal widget
├── docs/              # API documentation (OpenAPI)
├── monitoring/        # Grafana + OpenTelemetry config
├── tests/             # Integration + load tests (k6)
├── docker-compose.yml
└── Makefile

Hosting cost: $0/month on free-tier services.

All SDKs are MIT licensed. See docs/sdk-coverage.md for detailed status.

# Run unit tests
cargo test

# Run integration tests
cargo test --test integration

# Run load tests
k6 run tests/load/k6_load_test.js

import { HookSniff } from 'hooksniff-sdk';

const hs = new HookSniff('hr_live_YOUR_KEY');

// Create application
const app = await hs.application.create({ name: 'My App' });

// Create endpoint
const ep = await hs.endpoint.create({
  url: 'https://your-app.com/webhook',
  application_id: app.id,
  description: 'Order notifications',
});

// Send webhook
await hs.webhook.send({
  endpoint_id: ep.id,
  event: 'order.created',
  data: { order_id: '12345', amount: 99.99 },
});

from hooksniff import HookSniff

hs = HookSniff('hr_live_YOUR_KEY')

# Create application
app = hs.application.create(name='My App')

# Create endpoint
ep = hs.endpoint.create(
    url='https://your-app.com/webhook',
    application_id=app['id'],
    description='Order notifications'
)

# Send webhook
hs.webhook.send(
    endpoint_id=ep['id'],
    event='order.created',
    data={'order_id': '12345', 'amount': 99.99}
)

import hooksniff "github.com/servetarslan02/hooksniff-go"

hs := hooksniff.NewClient("hr_live_YOUR_KEY")

// Create application
app, _ := hs.Application.Create(&hooksniff.ApplicationCreate{
    Name: "My App",
})

// Create endpoint
ep, _ := hs.Endpoint.Create(&hooksniff.EndpointCreate{
    URL:           "https://your-app.com/webhook",
    ApplicationID: app.ID,
    Description:   hooksniff.String("Order notifications"),
})

// Send webhook
hs.Webhook.Send(&hooksniff.WebhookSend{
    EndpointID: ep.ID,
    Event:      "order.created",
    Data:       map[string]interface{}{"order_id": "12345", "amount": 99.99},
})

📖 Full SDK docs: docs/SDK_EXAMPLES.md

Enterprise customers can whitelist HookSniff's static outbound IPs in their firewall/WAF. See docs/OUTBOUND_IPS.md for the full list.

curl https://hooksniff-api-499907444852.europe-west1.run.app/v1/outbound-ips
# → { "ips": ["..."], "updated_at": "..." }

• 📖 Documentation
• 🐛 Report a Bug
• 💡 Request a Feature
• 💬 GitHub Discussions
• 🔒 Security Policy

We welcome contributions! Please read our Contributing Guide before submitting a PR.

For security vulnerabilities, please see our Security Policy. Do not open public issues for security bugs.

MIT — see LICENSE for details.