> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/administration/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-webhooks.md).

# Integrate Prisma Cloud with Webhooks

Learn how to integrate Prisma Cloud with webhooks to see alerts in your service or application.

Integrate Prisma® Cloud with webhooks to send Prisma Cloud alerts to webhooks and pass information to any third-party integrations that are not natively supported on Prisma Cloud. Your incident response teams can monitor the webhook channels to investigate and remediate security incidents. With a webhook integration, you can configure Prisma Cloud to send information to the webhook as an HTTPS POST request as soon as an alert is generated. You can also modify the key format and value associated in the alert payload. If you have internal services or applications that subscribe to the webhook, these subscribing clients receive the alert data in a JSON format.

## Prerequisites

1. Obtain your **Webhook URL**.

   If you have additional details that you want to include in the payload to enable additional security or to verify the authenticity of the request, you can include these as key-value pairs in a custom header.
2. Set up webhooks as an integration channel on Prisma Cloud.

   If you have a firewall or cloud Network Security Group between the internet and webhooks, you need to ensure network reachability and [Enable Access to the Prisma Cloud Console](/content-collections/get-started/access-prisma-cloud.md).

## Set up Webhook integration on Prisma Cloud

Follow these steps to setup Webhook integration on Prisma Cloud.

1. Log in to Prisma Cloud.
2. Select **Settings > Integrations & Notifications > Integrations**.
3. Select **Add Integration > Webhook** from the list.
4. Enter the **Integration Name** and optionally, add a **Description**.
5. Enter your **Webhook URL**.
6. (tt:\[Optional]) Enable **Custom Payload**.

   When the option is enabled, you can modify the key-value pairs that are sent in the alert payload for only **Config** type policies when violations occur.
7. Add custom **HTTP Headers** as key-value pairs.

   You can include an authentication token in the custom header. The integration includes Content-Type as a default header and you cannot edit it.
8. Select **Next**.

   <figure><img src="/files/H1T4Sprplxe77NJSUrY4" alt="webhook integration config"><figcaption></figcaption></figure>
9. Review the **Custom Payload** format if you have enabled it.
   * The alert payload information including the key and the value is displayed onscreen. You can modify the payload to meet your integration needs.
   * Use the JSON editor to modify the JSON data in the alert payload.

     You can review the existing payload and modify the key and value pairs to suit the implementation needs for the subscribing webhook client. The JSON editor includes the reference vocabulary for a brief description of each key.

     <figure><img src="/files/IRRAmzfRLl8zFsxbeBfj" alt="webhook custom payload"><figcaption></figcaption></figure>
10. Select **Next**.
11. Review the **Summary** and then **Test Integration**.
12. **Save Integration** if the test is successful.

    <figure><img src="/files/sBFeY5izg60rUnJYFc8n" alt="webhook integration success"><figcaption></figcaption></figure>
13. After successfully setting up the integration, you will find it listed on the **Integrations** page. Use the **Actions** panel to **View**, **Edit**, or **Delete** the integration. You can also periodically check the integration status by clicking on the **Get Status** link.

    <figure><img src="/files/GeVDCX0rfG2Yht1hgKMv" alt="webhook int 2"><figcaption></figcaption></figure>

    <figure><img src="/files/awWi0pESgyCaRa07SQhw" alt="get status"><figcaption></figcaption></figure>
14. Modify an existing alert rule or create a new alert rule to [send alert notifications](https://docs.prismacloud.io/en/enterprise-edition/content-collections/alerts/send-prisma-cloud-alert-notifications-to-third-party-tools#id408f7a0a-fcb6-4847-81a1-eca436daa986) to Webhook.
15. View the alert POST requests on Webhook.

    <figure><img src="/files/TZRnAErPadfaYWgJ3K8e" alt="webhook alerts"><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/administration/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-webhooks.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.