Webhook Subscriptions

​

What are Webhook Subscriptions?

Webhook subscriptions are inbound webhook endpoints that receive real-time events from your incident management and alerting platforms. When an alert fires or an incident is created in PagerDuty, OpsGenie, or other supported platforms, the webhook delivers the event to TierZero, which triggers the appropriate Alert Agent.

​

Supported Platforms

​

How It Works

1. You create a webhook subscription in TierZero for a specific platform
2. TierZero generates a unique webhook URL and secret
3. You configure the external platform to send events to that URL
4. When events arrive, TierZero validates the webhook signature and routes the event to connected Alert Agents

​

Creating a Webhook Subscription

​

Step 1: Navigate to Integration Settings

1. Go to Settings → Integrations
2. Click on the integration for your platform (e.g., PagerDuty)

​

Step 2: Add a Webhook

1. Click Add Webhook in the integration settings
2. Enter a Name for the webhook (e.g., “Production PagerDuty”)
3. Provide the Remote ID, the identifier from your external platform
4. Enter the Secret or API key from the external platform

​

Step 3: Configure the External Platform

Copy the webhook URL from TierZero and configure it in your external platform: PagerDuty:

1. Go to Services → Service Directory in PagerDuty
2. Select the service → Integrations tab
3. Add a Generic Events API v2 integration or webhook subscription
4. Paste the TierZero webhook URL

OpsGenie:

1. Go to Settings → Integrations in OpsGenie
2. Add a Webhook integration
3. Paste the TierZero webhook URL and configure alert filters

FireHydrant:

1. Go to Settings → Integrations in FireHydrant
2. Add TierZero as a webhook endpoint
3. Select which incident events to forward

​

Step 4: Connect to Alert Agents

When creating or editing an Alert Agent, select the webhook subscription as the alert source. One webhook can be connected to multiple Alert Agents.

​

Managing Webhook Subscriptions

​

Viewing Webhooks

From the integration settings page, you can see all configured webhooks including:

• Webhook name and platform type
• Connected Alert Agents
• Webhook events received

​

Editing Webhooks

1. Click on a webhook to edit its name or configuration
2. Secrets are redacted after creation for security. To update a secret, enter the new value

​

Deleting Webhooks

1. Click the delete button next to the webhook
2. Confirm the deletion

​

Security

• Signature validation: Every incoming webhook is validated using the stored secret before processing
• Secrets encrypted at rest: Webhook secrets are encrypted and never returned in API responses
• Unique endpoints: Each webhook subscription gets a unique URL with an embedded identifier
• Audit trail: All webhook events are stored with full payload for debugging and replay

​

Troubleshooting

​

Webhooks Not Arriving

1. Verify the webhook URL is correct in the external platform
2. Check that the external platform is not filtering out the events you expect
3. Confirm the webhook secret matches what’s configured in TierZero
4. Check the external platform’s webhook delivery logs for errors

​

Alert Agent Not Triggering

1. Verify the webhook subscription is connected to the Alert Agent
2. Check that the Alert Agent is active (not paused)
3. Review the webhook event in the integration settings to confirm it was received