Integrate Prisma Cloud with Webhooks

Learn how to integrate Prisma™ Cloud with webhooks to see alerts in your service or application.
Integrate Prisma™ Cloud with webhooks to send Prisma Cloud alerts to webhooks and pass information to any third-party integrations that are not natively supported on Prisma Cloud. Your incident response teams can monitor the webhook channels to investigate and remediate security incidents. With a webhook integration, you can configure Prisma Cloud to send information to the webhook as an HTTP POST request as soon as an alert is generated. And if you have internal services or applications that subscribe to the webhook, these subscribing clients can get data immediately in JSON format.
  1. Obtain your
    Webhook URL
    .
    If you have additional details that you want to include in the payload to enable additional security or to verify the authenticity of the request, you can include these as key-value pairs in a custom header.
  2. Set up webhooks as an integration channel on Prisma Cloud.
    1. Log in to Prisma Cloud and select
      Settings
      Integrations
      .
    2. +Add New
      integration.
    3. Set the
      Integration Type
      to
      webhooks
      .
    4. Enter your
      Webhook URL
      .
    5. Add any custom
      HTTP Headers
      as key-value pairs.
      You can, for example, include an authentication token in the custom header. The integration includes Content-Type as a default header and you cannot edit it.
    6. Test
      and
      Save
      the integration.
      After you set up the integration successfully, the status (
      Settings
      Integrations
      ) turns red when the webhook URL is unreachable or when Prisma Cloud cannot authenticate to it successfully and turns green when there aren’t any issues or the issues are resolved.
      webhooks-create-integration.png
  3. Modify an existing alert rule or create a new alert rule to send alert notifications to webhook. (See Send Prisma Cloud Alert Notifications to Third-Party Tools.)
  4. View the alert POST requests on Webhook.
    In one POST request, alerts are sent in a batch of 30.
    webhook-alerts.png

Recommended For You