Developers
Get notified in real-time when something happens. BlockForge sends HMAC-signed HTTP POST requests to your endpoints for every critical event — downtime, backup failures, security vulnerabilities, plugin updates, and more. Per site, per event, with automatic retries and a full delivery log.
How It Works
Add a webhook URL in your site settings, select the events you care about, and BlockForge handles the rest. Every matching event triggers an HTTP POST to your endpoint with a structured JSON payload and an HMAC signature for verification.
https://hooks.slack.com/services/T0...
https://events.pagerduty.com/v2/en...
https://dashboard.agency.com/api/w...
30+ Event Types
uptime.site_down Site went offlineuptime.site_recovered Site is back onlineuptime.ssl_expiring SSL certificate expiringuptime.domain_expiring Domain expiring soonuptime.site_disconnected No heartbeatbackup.completed Backup finishedbackup.failed Backup failedbackup.verification_failed Verification failedsecurity.vulnerability_criticalsecurity.vulnerability_highsecurity.integrity_issuessecurity.keys_rotatedsecurity.files_restoredupdates.core_updated WordPress updatedupdates.plugin_updated Plugin updatedupdates.theme_updated Theme updatedupdates.update_failed Update failedwordpress.broken_detectedwordpress.auto_healedwordpress.healing_faileddatabase.optimizedstaging.createderrors.php_fatal* Subscribe to all eventsPayload
HMAC SHA-256 signing — every request includes an X-BlockForge-Signature header so you can verify it came from BlockForge
Event type header — X-BlockForge-Event lets you route events without parsing the body
Automatic retries — failed deliveries are retried 3 times with exponential backoff (30s, 60s, 120s)
Delivery log — view delivery status, response codes, durations, and retry history in your dashboard
10-second timeout — your endpoint has 10 seconds to respond with a 2xx status code
Content-Type
application/json
User-Agent
BlockForge-Webhook/1.0
X-BlockForge-Event
uptime.site_down
X-BlockForge-Signature
sha256=a1b2c3...
POST — uptime.site_down
{
"event": "uptime.site_down",
"timestamp": "2026-03-10T14:32:07+00:00",
"webhook_id": "a1b2c3d4-...",
"site": {
"uuid": "e5f6a7b8-...",
"url": "https://client-shop.com",
"name": "Client Shop"
},
"data": {
"status_code": 503,
"response_time": 12840,
"error_message": "Service Unavailable",
"probe_location": "eu-west"
}
}
Verify signature (PHP)
// Verify the webhook signature
$payload
= file_get_contents('php://input');
$signature
= $_SERVER['HTTP_X_BLOCKFORGE_SIGNATURE'];
$expected
= 'sha256=' . hash_hmac(
'sha256', $payload, $secret
);
hash_equals($expected, $signature);
Use Cases
Route downtime and security events to dedicated channels. Different channels for different severity levels.
Trigger incidents for critical events. Auto-resolve when the site recovers.
Automatically create tickets in Jira, Linear, or your custom system when vulnerabilities are found.
Feed events into your own monitoring dashboard or data warehouse for cross-platform visibility.
Trigger automated workflows based on BlockForge events. Send SMS on downtime, update spreadsheets on backups.
Build white-label notification systems that keep your clients informed without exposing BlockForge.
Connect your tools to BlockForge with outgoing webhooks. HMAC-signed, automatically retried, with a full delivery log. Free plan available.