Are OpsIQ webhooks secure?

OpsIQ signs webhook payloads using HMAC-SHA256 over the raw body and implements timestamp and replay protections, along with per-connector secret rotation. Receivers should verify the signature and timestamp before processing the payload. Additionally, they should handle repeated deliveries idempotently and ensure that signing secrets are kept out of public code and logs.

Related articles

• How does OpsIQ protect remote HTTP actions from SSRF?
• How does OpsIQ encrypt data?
• Does OpsIQ support two-factor authentication?
• Does OpsIQ support SSO?
• Does OpsIQ support role-based access control?
• Does OpsIQ keep an audit trail?
• Does OpsIQ log AI activity?
• Can OpsIQ AI bypass security controls in Autopilot mode?