Audit Logs
Track every change to your buckets, inputs, outputs and team members with Webhook Relay audit logs for security, compliance and debugging.
Audit logs give you a tamper-evident record of every important action taken in your Webhook Relay account — who changed a forwarding rule, who rotated a token, who added a team member and when. They are essential for security investigations, compliance reporting and debugging configuration changes across a team.
Why audit logs matter
When more than one person manages your webhook infrastructure, "who changed this?" becomes a question you need to answer quickly. Audit logs turn that guesswork into a precise, time-stamped trail:
- Security visibility: Detect unexpected changes — a new output pointing to an unknown destination, a token created at 3am, or a forwarding rule that was silently disabled. Every event is attributed to a specific user.
- Compliance: Frameworks such as SOC 2, ISO 27001 and GDPR expect you to demonstrate access control and change tracking. Audit logs provide the evidence reviewers ask for.
- Debugging configuration drift: When webhooks suddenly stop being delivered, the audit log often points straight to the change that caused it — a deleted input, an edited rule, or a rotated credential.
- Accountability across teams: With teams and member roles, audit logs make it clear which collaborator performed each action.
What gets recorded
Webhook Relay records the actions that change the state of your account, including:
- Bucket, input and output creation, updates and deletion
- Changes to forwarding rules and transformations
- Token (access key) creation and revocation
- Team member invitations, role changes and removals
- Tunnel and custom domain configuration changes
Each entry captures the actor, the action, the affected resource and a UTC timestamp, so you can reconstruct exactly what happened and in what order.
Built for teams and enterprises
Audit logs work hand in hand with the rest of Webhook Relay's collaboration and security features. Combine them with Single Sign-On (SSO), team member roles and static outgoing IPs to build a webhook platform your security team is comfortable signing off on.
Ready to get full visibility into your account activity? Create an account or talk to our team about Business and Enterprise plans.
