Webhooks

Every change into your own systems

Send each change as a signed JSON event to any public endpoint: your data warehouse, an internal tool, or an automation in Zapier, Make or n8n. Verify the signature, and you know it came from Orlea.

Available on Pro, Team and Enterprise

Example

The change.detected event

The request your endpoint receives. The signature covers the timestamp and the exact body.

Illustration with fictional companies and people.

POST https://hooks.acme.dev/orlea

content-type:
application/json
orlea-event:
change.detected
orlea-signature:
t=1792568530,v1=9f2c4e…b71a
user-agent:
Orlea-Webhooks/1.0
{
  "id": "5b0e2c4a-7f1d-4d8e-9a63-2c1f0b7e4d19",
  "type": "change.detected",
  "createdAt": "2026-10-21T07:42:10.000Z",
  "data": {
    "competitor": { "name": "Brisklane", "domain": "brisklane.app" },
    "page": { "url": "https://brisklane.app/pricing", "kind": "pricing" },
    "headline": "Brisklane cuts Pro to $39 and adds SSO",
    "summary": "Pro drops from $49 to $39 a month; SSO moves from Business into Pro.",
    "whyItMatters": "Brisklane now undercuts your mid-market plan by $10 with SSO included.",
    "whatChanged": [
      "Pro: $49 → $39 a month (−20.4%)",
      "SSO: Business only → included in Pro"
    ],
    "priority": "high",
    "category": "pricing",
    "isBackfill": false,
    "language": "en",
    "occurredAt": "2026-10-21T07:41:52.000Z",
    "dateKind": "exact",
    "windowStart": null,
    "windowEnd": null,
    "url": "https://app.orlea.com/app/changes/5b0e2c4a-…"
  }
}

What it does

Built for how teams act.

Setup

Set up in three steps.

  1. 01

    Add an endpoint

    An admin adds a public URL in Settings → Integrations and picks a priority threshold.

  2. 02

    Copy the secret

    The signing secret is shown once. Store it where your receiver can verify each request.

  3. 03

    Send a test

    Changes flow as soon as the endpoint is saved. Send a test event to check your receiver first.

Related

More integrations

FAQ

Questions, answered

How do I verify a request?

Take the t and v1 values from the Orlea-Signature header, compute HMAC-SHA256 of the timestamp, a dot and the raw body with your secret, and compare. Reject requests older than five minutes. Requests also carry the same values as Dominate-Signature and Dominate-Event, older names kept so existing receivers keep working.

Does the payload contain personal data?

No. Events describe the competitor's change, never people on your team or theirs.

Can a webhook post to Slack?

Yes. A Slack incoming-webhook address is recognised and gets a formatted message. For buttons your team can act on, use the Slack app.

Which plans include webhooks?

Pro, Team and Enterprise, and the free trial.

Be the first to know. Every time.

Pick your first competitors in a few clicks and see their last 90 days within minutes.