Hookbase

Reliable webhook infrastructure for engineering teams.

Ingest, verify, and route mission-critical asynchronous events globally with sub-millisecond overhead, dual HMAC security, and zero data loss.

  • < 3ms p99 latency
  • 100% Guaranteed delivery
  • Zero data loss buffer
  • Dual HMAC verification

Capabilities: Stripe & Shopify Ingestion, Dual HMAC Verification, Dead Letter Queue (DLQ), Exponential Auto-Retries, Real-Time Event Streaming, Sub-3ms p99 Latency, CLI Tunnel & Local Webhook Proxies, Dokploy & Hetzner Deployments, Zero Data Loss Buffer, Full Payload Forensics

01 / Core Infrastructure

Deterministic delivery under extreme load.

Webhooks shouldn't fail silently or drop packets during traffic spikes. Ingest at scale, verify cryptographically, and dispatch with sub-millisecond precision.

Surge Buffer01
StripeShopifyGitHubBullMQ CoreRedis Buffered200 OK< 3ms ACK

Distributed BullMQ Queue

Buffers incoming bursts into high-throughput Redis queues. Instantly answers senders with sub-3ms acknowledgments while safeguarding downstream destinations from concurrency spikes.

Security02
Received Headersha256=9f4bcd2e41a7…Computed HMACsha256=9f4bcd2e41a7…HMACMATCH

Dual HMAC Verification

Cryptographically inspects and validates signatures in real time. Validates SHA256 signatures for Stripe, Shopify, GitHub, and custom webhooks before dispatching downstream.

Resilience03
#10s (500)#2+15s (502)#3+2m (504)#4200 OK

Exponential Retries with Jitter

Automatic backoff policies accommodate downstream service maintenance, outages, and cold starts with randomized jitter to eliminate thundering herd storms.

Forensics04
DLQ Quarantined • evt_3M14p9LkAttempt 5/5Error: ETIMEDOUT connect 10.0.4.12:443Headers: x-hookbase-id: del_90bca23f4e19Payload: { "charge.succeeded", amount: 14900 }1-Click Replay

Dead Letter Queue & Replay

Exhausted attempts never disappear into the void. Quarantined in an isolated DLQ with raw payloads, error stack traces, and 1-click manual or batch replay.

02 / Architecture & Reliability

Zero data loss. Zero black-box dependencies.

No vendor lock-in, no synthetic rate-limits, and no lost revenue due to dropped webhooks. Own your ingestion pipeline with deterministic reliability.

  • Self-Hosted or Cloud

    Deploy directly on your own infrastructure with Docker, Dokploy, or K3s. Your event payloads, customer tokens, and webhook secrets never leak to third-party aggregators.

  • Sub-3ms Edge Ingestion

    Engineered for sub-millisecond edge latency with in-memory Redis buffers. Instantly returns 200 OK acknowledgments to senders while asynchronous workers route downstream.

  • Full Payload Forensics

    Audit every HTTP header, IP origin, signature digest, and execution trace with tamper-proof records. Replay any historical event to staging or production in 1-click.

03 / Proof & Local Forwarding

Verified in production.

From local localhost development to global multi-region deployments. Test and inspect payload signatures with absolute transparency.

Live Ingestion Auditevt_3M14p9Lk
POST/hook/stripe/charge.succeeded
200 OK • 48ms
Computed HMAC-SHA256

sha256=9f4bcd2e41a788c0349281a943fe091c8901235b

Event Body (charge.succeeded)
{
  "id": "ch_3M14p9LkdIwHu7ix",
  "object": "charge",
  "amount": 14900,
  "currency": "usd",
  "status": "succeeded",
  "customer": "cus_N8xL9p2B10"
}
Production Event 01 — Stripe IngestionHMAC Verified
Developer CLI Tunnelhookbase-cli v1.4
Forwarding to http://localhost:3000

$ npx @hookbase/cli listen --forward-to localhost:3000/api/webhook

[22:30:14] Stripe charge.succeeded200 OK • 24ms
[22:30:21] GitHub push (refs/heads/main)200 OK • 18ms
[22:30:29] Shopify orders/create201 OK • 31ms
Developer CLI 02 — Zero ngrok hassleTunnel Ready