Webhooks setup

TL;DR

🔄 Subscribe to events (evidence uploaded, gap updated, MRCC issued, etc.) via signed HMAC webhooks.

🪜 Setup

1. Settings → Integrations → Webhooks
2. Add an endpoint URL
3. Pick events to subscribe to
4. Copy the signing secret (used to verify requests on your side)

📨 Events available

• estate.created / estate.updated
• evidence.uploaded / evidence.confidence_changed
• gap.updated
• mrcc.requested / mrcc.issued
• trust_passport.shared

🔐 Verifying signatures

Each request includes header X-NexCyber-Signature: t=<ts>,v1=<hmac>. On your side: HMAC-SHA256(secret, "{ts}.{body}") === v1.

⏱️ Retry policy

• Exponential backoff: 1m, 5m, 30m, 2h, 12h
• Total of 5 retries
• After exhausted: event marked failed, available via /events?status=failed

➡️ Next

• 🔌 Public API overview
• ✅ Verify Trust Passport

💬 Need help?

Reach out via our live chat (bottom-right) — Captain AI replies instantly, human experts within business hours. Email support@nexcyber.eu with [P1] for Command/Strategic priority issues.

ℹ️ Disclaimer — NexCyber provides a readiness analysis, not legal advice. Final compliance may require legal review or notified body certification.

Last reviewed: 2026-06-02 · NexCyber Help Center