HookDeploy

HookDeploy is a webhook gateway that captures HTTPS webhooks at Cloudflare edge locations in under 100ms, then routes each payload to public endpoints, SaaS tools, or private infrastructure through a source-available outbound mTLS agent.

What is HookDeploy?

HookDeploy is webhook infrastructure: you point any webhook source — Stripe, GitHub, Shopify, Twilio, Linear, and any other HTTPS sender — at a HookDeploy endpoint, and it captures, inspects, transforms, and forwards the request. Input is any HTTPS POST; output is one or more deliveries to your production server, a staging environment, Slack, n8n, or any HTTPS endpoint. Capture runs on Cloudflare's global network (300+ locations), while private delivery runs through a source-available HookDeploy Agent available for Linux, macOS, and Windows, plus signed menu-bar and system-tray desktop apps for macOS and Windows.

Key Features

• Edge capture in under 100ms — every webhook is caught at the Cloudflare point of presence nearest the sender, stored, and made readable with full headers, body, and query params.
• Private delivery with no open ports — the source-available HookDeploy Agent dials out over mTLS and delivers to a loopback port such as 127.0.0.1:3000, so no public IP, exposed URL, open port, or VPN is required.
• Live taps for local debugging — a tap sends a temporary copy of live traffic to a local port and path you choose, expires after a maximum of 8 hours, and leaves production destinations delivering normally.
• Payload transformations — rename, strip, and add fields, sanitize payloads, and inject destination request headers before forwarding.
• Multi-destination routing — Free gives 1 forward destination per endpoint, Starter gives 5, and Pro, Scale, and Enterprise give unlimited destinations per endpoint.
• Replay on demand — captured requests can be re-delivered to a destination, for example replaying a payment event to localhost:3000/webhooks.
• Prebuilt integrations — sources include Stripe, GitHub, Shopify, Twilio, Linear, WooCommerce, Auth0, HubSpot, Webflow, Paddle, SendGrid, and Intercom; destinations include Slack, Discord, Zapier, n8n, Make, Supabase, Airtable, Datadog, Klaviyo, a database, or a custom URL.

Who is it for?

Backend developers debugging integrations: start a tap from the macOS or Windows desktop agent, pick a local port and path, and inspect live Stripe or GitHub payloads on loopback without touching production delivery. Teams running private services behind a firewall: enroll the HookDeploy Agent so webhooks reach an internal host that never accepts inbound traffic. Platform and ops teams handling webhook volume: use replay, 90-day or 180-day request history, and multi-destination routing to recover missed events and fan out to staging, alerting, and automation tools.

What can you do with HookDeploy?

• Debug production webhooks locally: send a live copy of real traffic to 127.0.0.1 while the real destination keeps returning 200, so no cutover is needed.
• Deliver into private infrastructure: route events to an internal service over mTLS from seven relay regions (San Francisco, New Jersey, London, Amsterdam, Frankfurt, Singapore, Sydney) without opening a port.
• Fan out one event to many systems: forward a single captured webhook to production, staging, Slack, and an n8n or Zapier workflow at once, then replay it if a target fails.
• Reshape payloads before delivery: rename fields, strip sensitive data, add timestamps, and inject headers so downstream services receive the format they expect.

Pricing

HookDeploy is freemium. Free is $0 forever with 10,000 requests per month, 7-day request history, a hard cap with no overage, 0 production agents, unlimited development agents, and 1 destination per endpoint. Starter is $9/mo (25,000 requests, 30-day history, 1 production agent, 5 destinations), Pro is $39/mo (150,000 requests, 90-day history, 2 production agents, unlimited destinations), Scale is $99/mo (500,000 requests, 180-day history, 5 production agents), and Enterprise is custom with unlimited requests and 365-day history. Extra production agents cost $9/mo on Pro and Scale; Storage limits stop new payload bodies from being saved while metadata continues to be recorded.

Alternatives

• webhook.site — the page itself notes its free tier suits one-off URLs, while HookDeploy targets account-backed endpoints, team RBAC, transformations, and replay.
• ngrok — exposes a local machine to the internet and requires your server to be running, whereas HookDeploy captures webhooks at a stable public URL whether or not your server is up.
• Hookdeck — another hosted webhook gateway in the same category.

FAQ

Does HookDeploy work if my server is behind a firewall?

Yes. The HookDeploy Agent is a source-available process that connects outbound over mTLS and delivers to a loopback address such as 127.0.0.1, so the destination needs no public IP, open inbound port, or VPN. Production agents require a Starter plan or higher.

What happens when I hit my request limit?

HookDeploy can return HTTP 429 when an enforced request or rate limit is reached, and self-serve plans never auto-upgrade. Storage limits behave differently: requests are still accepted and metadata is recorded, but new payload bodies are not stored until the allowance resets or you upgrade.

How is webhook data secured?

Payload content is encrypted before storage using AES-256-GCM with an organization-scoped data encryption key that rotates weekly. Common credential headers are redacted before storage by default, Postgres Row Level Security applies, and admins can disable header sanitization per endpoint with the change audited.

Is there a free tier or trial?

The Free plan is $0 forever with 10,000 requests per month, 7-day history, and unlimited development agents. Eligible Starter and Pro organizations also get a 14-day trial; a card is required and Stripe bills at trial end unless you cancel first.

Is HookDeploy a replacement for ngrok?

They solve different problems. ngrok exposes your local machine to the internet, while HookDeploy captures webhooks at a stable public URL regardless of whether your server is up. For local debugging, HookDeploy taps a temporary copy of live traffic to loopback while production keeps delivering.