Soveren · AsyncAPI Specification

Soveren Webhooks

Version

View Spec View on GitHub CompanyInfra DevtoolsData SecurityDSPMDDRData PrivacyKubernetesComplianceSecurityAsyncAPIWebhooksEvents

AsyncAPI Specification

Raw ↑
generated: '2026-07-21'
method: searched
source: https://docs.soveren.io/en/stable/integration/webhook/
transport: outbound-webhook
delivery:
  method: POST
  content_type: application/json
  user_agent: SoverenWebhook/1.0
  signing:
    algorithm: HMAC-SHA-256
    header: x-soveren-signature
    format: sha256=<hash>
    optional: true
    note: Signature present only when a signing token is configured on the webhook.
  retry:
    failure_after: 15m
    note: Webhook status changes to failed if Soveren cannot deliver successfully for longer than 15 minutes.
  test: Integrations UI provides a "Send test event" button that returns 200 OK on success.
configuration: https://app.soveren.io/integrations/
categories:
  - id: infrastructure_updates
    description: Events related to changes in your infrastructure such as new data types or services.
  - id: data_at_risk
    description: Events indicating potential risks to your data such as policy violations or anomalies.
  - id: misconfiguration
    description: Events indicating misconfigurations such as unencrypted storage or public access.
  - id: other
    description: Other events such as discovery completion or update notifications.
event_types:
  data_at_risk:
    - 3rd_party_policy_violation
    - anomaly_detected
    - excessive_db_access
    - policy_violation
    - policy_violation_dar
  infrastructure_updates:
    - custom_asset_rule_conflict
    - email_clustered
    - new_data_type
    - new_external_receiver
    - new_internal_receiver
    - new_internal_sender
    - new_potential_data_storage
    - new_data_storage
    - started_storing_data
    - started_storing_datatype
    - updated_enduser_receiver
    - updated_external_receiver
    - updated_internal_receiver
    - updated_internal_sender
    - updated_robot_receiver
  misconfiguration:
    - policy_public_s3_bucket
    - policy_unencrypted_network
    - policy_unencrypted_rds
    - policy_unencrypted_s3_bucket
  other:
    - dar_release_update
    - dar_release_update_critical
    - dim_release_update
    - dim_release_update_critical
    - discovery_complete