- Category
- Webhooks & Delivery
- Status
- Live
- Platforms
- Web, API
- Stack
- Next.js, React, Prisma, PostgreSQL, Redis, Auth.js, Stripe, Tailwind CSS
HookPulse is outbound webhook delivery infrastructure: a product sends one event, HookPulse signs it, delivers it, retries it on a jittered backoff schedule for over seven hours, and logs every attempt. It's built for SaaS and API teams who need to offer webhooks to their own customers without rebuilding signing, retries and a delivery log from scratch.
Offering webhooks sounds like one HTTP call, but reliably delivering them means signing, retrying with backoff, rotating secrets without downtime, and keeping a log a customer can actually read. HookPulse handles that layer: a single ingest call returns immediately, and HookPulse takes over delivery.
Deliveries are signed with the standard timestamp-plus-HMAC scheme, with a shipped verification helper so a receiving server doesn't have to hand-roll signature comparison. Failed deliveries retry on a fixed, jittered schedule spanning more than seven hours, and endpoint URLs are re-resolved immediately before every attempt — redirects are never followed — closing a class of SSRF gap many hand-rolled webhook senders leave open.
Secret rotation keeps both the old and new secret valid during an overlap window, so no delivery is dropped mid-rotation, and the full delivery log is exposed through a scoped, signed, time-limited portal API a customer can embed in their own settings page.
- Event ingest
- A single POST call with a dedupe key returns immediately — delivery latency never becomes the caller's latency.
- Signed, retried delivery
- HMAC-signed POSTs with a timeout; failures retry on a fixed, jittered backoff schedule, with endpoints auto-disabled after repeated consecutive failures.
- Secret rotation
- Rotate a signing secret with an overlap window so customers migrate without dropped or broken deliveries.
- Portal API for delivery logs
- A scoped, signed, time-limited portal API lets a customer see their own delivery attempts and response codes, and retry manually, without emailing support.