Controls you can inspect.

A factual overview of the protections currently represented in Truehook. We do not claim certifications or guarantees that have not been independently verified.

Encrypted transport

Dashboard and API traffic are designed to run over HTTPS. Destination calls use HTTPS URLs.

Signed deliveries

Per-endpoint secrets support request authentication and timestamp-based replay protection.

Scoped access

API keys are stored as hashes, can be scoped, monitored, and revoked from the workspace.

Recoverable failure

Retries, attempt history, and dead-letter controls make delivery failure visible and actionable.

Responsible disclosure

If you believe you found a security issue, do not include secrets or customer payloads in your first message. Contact the team with a concise reproduction and impact assessment.

security@truehook.in