Supplier Risk Webhooks

You can configure the Censys Supplier Risk module to send webhook JSON payloads whenever new risks are identified in your supply chain. This document explains how to set up webhook notifications.

Prerequisites

• A Censys Platform user with the Supplier Risk - Manager role.
• The URL that you want to send webhook alerts to.
• Any headers you want to use for authorization, routing, and so on.

Webhook alert types

You can receive webhook alerts for risk alerts, six-hour risk digests, and Censys ARC Rapid Response advisories.

Risk alerts

Risk alerts send a digest of newly identified risks in your supply chain every five minutes. An example paylod is provided below.

Six-hour risk digests

The six-hour digest is a summary of newly identified top risks sent every six hours.

Censys ARC advisories

Censys ARC advisories are sent whenever a new Rapid Response risk has been identified that is present in your supply chain. If you do not receive a notification about a new Rapid Response risk, then Censys has not detected it in your supply chain. Advisories about issues that do not affect your supply chain are still visible on the My Supply Chain or Supplier Overview dashboards in the UI. An example payload is provided below.

Webhook example payload

The following is an example payload for a six-hour digest risk alert. Payloads for the risk alert and Censys ARC advisories are similar to the example below, but the cadence will instead be realtime.

{
  "delivery_id": "6f1c1d9e-0000-4000-8000-000000000004",
  "alert_type": "risk",
  "cadence": "digest",
  "create_time": "2026-09-18T06:00:00Z",
  "organization_id": "6f1c1d9e-0000-4000-8000-000000000001",
  "integration_id": "6f1c1d9e-0000-4000-8000-000000000003",
  "integration_display_name": "Risk Alerts",
  "scope": {
    "supply_chain_id": "6f1c1d9e-0000-4000-8000-000000000002"
  },
  "window_start": "2026-09-18T00:00:00Z",
  "window_end": "2026-09-18T06:00:00Z",
  "platform_url": "https://platform.censys.io/risks?scope=primary",
  "risk_alert": {
    "risks": [
      {
        "risk_type_id": "CVE-2021-44228",
        "name": "Log4Shell",
        "severity": "critical",
        "confidence": 0.95,
        "risk_category": "vulnerability",
        "description": "Apache Log4j 2 JNDI lookups allow remote code execution through crafted log messages.",
        "new_asset_count": 12,
        "suppliers": [
          {
            "id": "0b6f6f5c-1d7e-4c38-9a53-5d1a2f0c0009",
            "display_name": "Example Company"
          }
        ],
        "platform_url": "https://platform.censys.io/risks/log4shell"
      }
    ],
    "suppliers": [
      {
        "id": "0b6f6f5c-1d7e-4c38-9a53-5d1a2f0c0009",
        "display_name": "Example Company"
      }
    ],
    "total_new_asset_count": 12,
    "total_risk_type_count": 1,
    "total_rapid_response_count": 0
  }
}

Webhook alert fields

Expand the section below to see comprehensive definitions of webhook alert fields. Fields that are empty, zero, or false are left out of the JSON payload. The one exception is total_rapid_response_count, which is always present. All times are RFC 3339 in UTC.

Configure webhook alerts in the Censys Platform

1. Go to the Censys Supplier Risk module in the Platform web console. Select Integrations.
2. On the card for webhook alerts, click Set Up.
3. On the "Authentication" page:
   1. In the "Payload URL" field, enter the URL you want to send the JSON payload to.
   2. In the "Header Authorization" section, enter any headers you want to use.
4. Click Next.
5. On the "Configuration" page, select the alert types you want to send to the URL.
6. Click Next.
7. On the "Filters" page, configure the risk severity, type, and suppliers you want to be notified about.
8. Click Next.
9. On the "Review" page, enter an integration name and review your configuration options.
10. Click Finish Setup.