Improved
Verify that webhooks come from Allegrow
October 16th, 2026
You can now set up signed webhooks for your asynchronous validation results and bulk CSV completion notifications. Each delivery is signed with a secret unique to your company, so your endpoint can confirm it came from Allegrow and wasn't altered on the way.
Generate a signing secret from an Admin account in Settings → Webhook Secrets. From the next delivery, your webhooks include an X-Allegrow-Signature header:
X-Allegrow-Signature: t=1716729600,v1=5257a8691...d9f2c
Signing is opt-in: until you generate a secret, webhooks are delivered exactly as before, with no signature header.