Attention, Valimail Enforce users! Webhooks are now included in your plan. How often do you wish your security alerts were pushed directly into the platforms your team already lives in every single day? How can you ensure you are instantly notified of suspicious sending attacks or accidental rollbacks of your DMARC enforcement without having to actively pull that data? Here’s how webhooks can help you with all of this and more.
What are webhooks?
To understand the value of webhooks, it helps to first talk about APIs. Valimail offers several core APIs, including Account Management, DMARC Configuration, and Reporting Data. You can utilize these calls to manage domains and senders, or to retrieve email authentication metrics. But APIs generally operate on a “pull” model. This means you (or the code behind your custom reporting dashboard) have to actively connect to and query the Valimail platform to hand over that data when you want it.
Webhooks, on the other hand, operate on a “push” model, proactively reaching out to notify you of an event when needed.
Webhooks let you route Valimail alerts directly into your own tools and systems, allowing you to move beyond relying only on email notifications or periodic checks. When an event you’ve subscribed to occurs, Valimail sends a signed HTTP POST request containing event details directly to the endpoint URL you specify. Because it’s an automatic push, you can use this to pipe alerts right into a Security Information and Event Management (SIEM) solution, ticketing system, chat tool, or any other endpoint that can receive webhook calls.
How to use the new webhooks functionality
Each webhook you create can be scoped to specific event types, so you only receive the notifications that are relevant to your workflow.
At launch, the following webhook event types are available to all clients:
- Domain Added/Deleted
- MFA Enabled/Disabled
- SSO Enabled/Disabled
- New Service Detected
- DKIM Key Manager
- DMARC Policy
- Enabled Senders DMARC
- Record Configuration Change
- Suspicious Sending
- Executive Report
Getting started with webhooks
Wondering how to get started with webhooks? While your needs may vary, these particular webhooks might be most suited to common security-related domain protection scenarios.
Suspicious Sending: This webhook notifies you when an unusual amount of unidentified sender traffic is detected from a domain, which may indicate a suspicious sending attack. Pushing that alert instantly into your Security Operations Center (SOC) chat can save your team crucial mitigation time.
Record Configuration Change & DMARC Policy: The Record Configuration Change event alerts you when your DMARC, DKIM, or SPF configuration changes for any of your specified domains. The DMARC Policy event notifies you specifically when a DMARC policy is changed. This ensures nobody is accidentally (or maliciously) rolling back your domains from DMARC enforcement and downgrading protection.
DKIM Key Manager: Incredibly helpful for DomainKeys Identified Mail (DKIM) cryptographic key maintenance, this event notifies you when a DKIM key should be rotated, or if a key is added, edited, or deleted.
Try it now or learn more
Webhooks are available today for all Valimail Enforce users. Find more information on how to configure and utilize them here, in our Knowledge Base.
If you’re not already a Valimail Enforce user and would like to learn more about our APIs, webhooks, and all of the other great features that allow you to protect your email domains at scale against phishing and spoofing attacks, contact us today.
