Everything you need for webhooks
No queues to manage, no retry logic to write.
- Automatic retries: Failed deliveries retry on an exponential schedule: 30 s → 5 min → 30 min → 2 h → 12 h. Every attempt is logged.
- HMAC-SHA256 signing: Every delivery is signed with your whsec_ secret for secure validation.
- Real-time dashboard: Monitor delivery success rates, inspect failed messages, and replay them with one click.
- Fan-out delivery: Route events to multiple destinations, production, staging, or different team receivers.
- WordPress & WooCommerce plugin: Ready-made WooCommerce and WordPress events turned into webhooks with a checkbox.
- Organised by application: Group endpoints and messages by application and switch between them instantly.
- Idempotent delivery: Pass an idempotencyKey to guarantee retries never cause duplicate deliveries.
- Built-in test sink: Unique sink URL for every app to inspect payloads and signatures.
- Per-endpoint rate limits: Buffer and smooth traffic automatically with no backpressure logic needed on your server.
GDPR compliant by design
Webhook payloads often carry personal data. Ploq is built so using it doesn't create compliance issues.
- Data never leaves the EU: Infrastructure runs on OVHcloud (France), with no US hyperscalers.
- Encrypted at rest: Payloads encrypted with AES-256-GCM using unique per-organisation keys.
- No US CLOUD Act exposure: Every dependency is an EU company under EU jurisdiction.
- Data Processing Agreement: Clear DPA listing EU sub-processors: OVHcloud, Scaleway, and Mollie.
Up and running in minutes
- Sign up with just your email.
- Create an application container.
- Register a webhook endpoint.
- Send your first message.
Verify every delivery on your server
Every webhook carries Webhook-Id, Webhook-Timestamp, and Webhook-Signature headers to confirm authenticity and protect against replay attacks.