Optional Webhook Notifications

HackNotice supports webhook notifications for all three monitoring services:

• Third Party Monitoring
• First Party Monitoring
• End User Monitoring

Webhook notifications provide a lightweight way to be informed when new activity is detected, while keeping alert details protected behind the HackNotice platform.

How It Works

HackNotice evaluates each service on a 12-hour batch cadence. If new alerts have been added to a service timeline since the previous run, a webhook notification is sent.

Each webhook includes:

• The number of new alerts
• A direct link to the corresponding service in the HackNotice platform
• No alert details (for security reasons)

Users must log in to the HackNotice platform to view the full alert information.

Example Notifications

Below are examples of webhook notifications delivered to Slack.

Third Party Monitoring

HackNotice

We have detected a new alert for your third party watchlist.

https://app.hacknotice.com/#/thirdparty/watchlist

End User Monitoring

HackNotice

End Users have 211 new alerts.

End User Timeline

Example: Slack Webhook Plugin (Third Party)

Service Licensing

Webhook notifications are only available for services included in your subscription.

If you are not licensed for a service, no webhook notifications will be generated for that service.

Security Considerations

Webhook notifications intentionally contain only summary information.

Included:

• Alert count
• Link to the applicable HackNotice service

Not Included:

• Usernames
• Domains
• Breach details
• Passwords
• Threat context
• Any other sensitive information

All alert details remain protected behind the HackNotice platform login.

Need More Frequent or Customized Notifications?

The default webhook behavior is designed to provide simple, secure alert awareness. If your organization requires:

• Faster notification frequencies
• Real-time alert delivery
• Additional metadata in webhook payloads
• Alert summaries or contextual details
• Custom webhook formats
• SIEM/SOAR integrations

please contact your HackNotice account representative. Custom webhook configurations are available to accommodate specific operational requirements.

Frequently Asked Questions

How often are webhook notifications sent?

Webhook notifications are evaluated every 12 hours. A notification is only sent when new alerts have been detected.

Will I receive alert details in the webhook?

No. Webhooks intentionally exclude alert details for security reasons. Full information is available after logging into the HackNotice platform.

Can I receive webhooks for only one service?

Yes. Each service is licensed separately, and webhook notifications are generated only for services included in your subscription.

Can the webhook format or frequency be customized?

Yes. If you need more frequent notifications or additional information in the payload, contact your HackNotice account representative to discuss custom webhook options.