Webhook Debugger — Inspect & Debug Webhooks Online
Debug webhooks without guesswork. webhook.press shows you the exact request a provider sends — headers, body, query and source IP — in real time, and lets you control the response to reproduce edge cases.
What you get
- Exact payload and header inspection
- Real-time delivery view
- Source IP of each delivery
- Custom response codes and bodies
- Response delay for timeout testing
- Shareable endpoint for teams
How it works
Open webhook.press and you instantly get a unique HTTPS URL — no signup, no configuration. Point any webhook, integration or HTTP client at it and every request appears in your browser in real time: the method, headers, query string, body and the sender’s source IP. You can set a custom response — status code, headers, body and delay — to mock a provider or reproduce edge cases, and share the URL with your team.
Under the hood it’s built for security testing as much as debugging. Each session unlocks an out-of-band toolkit — redirects for SSRF and open-redirect testing, DNS-based callbacks for blind vulnerabilities, and payload hosting for XSS and XXE — the same building blocks you’d reach for with Burp Collaborator, free and self-serve.
Built for pentesters and developers
Instant & free
A public HTTPS endpoint in one click, no account required. Your payload appears within a second.
Real source IP
Every request shows the sender’s IP — essential for confirming SSRF and tracing integrations, which in-browser-only tools can’t do.
Out-of-band ready
DNS callbacks, redirects and payload hosting for blind SSRF, XXE and filter-bypass testing.
FAQ
Can I see why a webhook fails?
Yes — inspect the exact request, then return custom status codes and delays to reproduce and debug the failure.
Do captures persist?
Recent requests persist for the session; long-term retention is on the roadmap for accounts.
Do I need to sign up?
No — the core tool is free and needs no account. Open it and start catching requests immediately.
Can I use it for SSRF and OOB testing?
Yes — that’s what sets it apart. DNS callbacks, redirects and payload hosting make it a self-serve Burp Collaborator alternative.
Try it now — free
No signup. Open the tool, grab your URL, and start catching requests. When you find something worth chasing, a real pentest is one click away.