Skip to content
Webhook.site

Webhook.site

webhook.site

Published February 20, 2025 · Last updated 1 month ago

Instant webhook testing without signup.

L1 Anonymous Hosting
6.0
overall / 10
Privacy65
Trust62

At a glance

Accepts Monero
Accepts Bitcoin
No signup
Non-custodial
No email required
No IP logging
Tor available
Open source

Pros

  • +Truly anonymous free tier, no email, phone, or signup required to generate working URLs and inspect requests instantly.
  • +Open-source core available on GitHub, enabling self-hosted deployments for users wanting full data control.
  • +Visual workflow builder, Custom Actions and WebhookScript allow transforming and routing requests without external infrastructure.
  • +EU-based operator (Denmark) with GDPR-aligned privacy policy and 14-day refund guarantee on paid plans.
  • +Domain maturity and clean security profile, 10+ year history, zero malware detections, and positive third-party trust scores as of 2026.

Cons

  • Free tier heavily capped, URLs expire automatically and hit hard request ceilings, after which endpoints return 410/429 errors.
  • No cryptocurrency payments, billing appears card/invoice only, reducing options for users seeking fully anonymous upgrades.
  • Minimal privacy controls on free URLs, random subdomains are security-through-obscurity; anyone guessing or obtaining the URL sees all traffic.

Full review

What is Webhook.site

Webhook.site is a Danish-developed webhook testing and automation platform operated by Webhook ApS (VAT ID DK41561718). As of 2026-05-30, the service generates free, unique, random URLs and corresponding email addresses that instantly log any incoming HTTP requests, emails, or DNS queries without requiring user registration. The core utility sits in a browser-based inbox that displays payloads in real time.

Beyond passive inspection, the platform offers Custom Actions-a visual workflow builder-and WebhookScript, a proprietary scripting language, to transform, validate, and route requests. Additional tools include a drag-and-drop Form Builder, CSV export, request replay, XHR redirect, and localhost forwarding for local development.

How no-KYC is it?

The free tier is genuinely no-KYC: users receive a functioning URL and email immediately, with no email verification, phone number, or identity document required. The older kycnot.me listing flagged this as "No KYC mention," and current evidence confirms no identity collection at the free level.

Paid tiers (Basic, Pro, Enterprise) require account creation with an email address and password, plus standard payment details. The registration page offers SSO login as an alternative. While this introduces a minimal data footprint, it remains below standard financial KYC thresholds-no government ID or proof of address is requested. The service does not appear to serve regulated financial products, so KYC obligations are inherently limited.

Privacy & security

Webhook.site publishes a Terms & Conditions and Privacy Policy last updated 1 May 2026. The operator is a Danish ApS, placing data processing under EU jurisdiction and GDPR. The site enforces HTTPS, and third-party scans (Gridinsoft, April 2026) report zero malware or phishing detections, a 10.2-year domain history, and a Tranco rank of 33,666.

Free URLs expire and have request caps-specifically, the free tier hits a maximum request limit after which the endpoint returns HTTP 410 Gone or 429 Too Many Requests. This automatic expiration functions as a privacy feature by default, though users should treat all payloads sent to free URLs as transient and potentially visible to anyone with the random subdomain. Premium accounts offer "secure data storage" and non-expiring URLs with user access controls.

The open-source core (GitHub: webhooksite/webhook.site) allows self-hosting for users seeking maximum data sovereignty. No privacy breaches or logging scandals appear in the 2026 evidence.

Payments, fees & limits

Pricing is transparently listed in USD with VAT calculated at checkout. Three paid tiers exist as of 2026-05-30:

  • Basic ($9/month, $90/year): 3 URLs, unlimited requests, 1,000-request history, 1 schedule, custom actions, CSV export, API access, custom URLs (webhook.site/yourname), non-expiring URLs
  • Pro ($27/month, $270/year): 50 URLs, 10,000-request history, 5 schedules, 1 database, plus custom domains with SSL
  • Enterprise ($69/month, $699/year): unlimited URLs, 100,000-request history, unlimited schedules, multi-user support with SSO (10 users included), custom domains

All paid plans include a 14-day refund period. Invoices are emailed post-purchase. No cryptocurrency payment options are mentioned; standard card or SEPA-style methods appear likely given the VAT-inclusive European billing.

User experience & support

The interface is browser-first and immediate: load the homepage, copy the auto-generated URL, and begin receiving requests. No client installation is required. The Form Builder and Custom Actions lower the barrier for non-developers building simple automations.

Support channels include email support for paid tiers and a ticket system accessible from the login page. Documentation lives at docs.webhook.site with a dedicated news/changelog feed. A Reddit community (r/webhooksite) provides peer support, though activity appears moderate with the most notable update posted October 2023 covering Auto JSON and Custom Actions improvements.

Who it's for

Webhook.site suits privacy-conscious developers, QA engineers, and automation builders who need quick, disposable endpoints without account friction. The free tier excels for ephemeral debugging; paid tiers fit teams requiring persistent URLs, custom domains, or workflow automation. Self-hosting via the open-source project appeals to organizations with strict data-residency requirements. It does not replace full API gateways or production webhook infrastructure, but it eliminates overhead for testing and prototyping.

KYC & privacy

L1 Anonymous

Pseudonymous access, no personal data.

The service collects no identity data at the free tier and minimal data (email, password, payment info) only upon voluntary upgrade. Danish jurisdiction and GDPR apply. Free URLs are ephemeral by design, but payloads are visible to anyone with the URL during the token's active lifetime-users should avoid sending sensitive production data to random subdomains.

No

Custodial

No

Requires email

No

Logs IP

Verdict

Webhook.site remains a solid no-KYC choice for quick webhook debugging and lightweight automation, particularly for users who can work within free-tier limits or self-host. For persistent, team-scale use, the Danish-hosted paid tiers offer reasonable transparency, though privacy-maximalists may prefer the open-source route over cloud accounts.

Frequently asked questions

Is Webhook.site no-KYC?
Yes for the free tier: you get a working URL and email instantly with zero identity verification. Paid accounts require only an email and standard payment details, not government ID.
Does Webhook.site require an email address?
No email is needed for free use. An email is only required to register a paid account for persistent URLs and advanced features.
What payment methods does Webhook.site accept?
The site lists USD pricing with VAT/sales tax calculated at checkout and invoices sent via email. Specific methods are not detailed in the evidence, but European card or SEPA-style payments are implied.
Is Webhook.site safe to use?
Third-party scans as of April 2026 show no malware or phishing, a 10.2-year domain history, and a high trust score. The Danish operator publishes clear terms and GDPR-aligned policies.
Is Webhook.site still operating in 2026?
Yes. The official site was crawled successfully on 2026-05-30, with active pricing, updated terms dated 1 May 2026, and ongoing GitHub repository maintenance.
Can I self-host Webhook.site?
Yes. The core project is open-source under the webhooksite/webhook.site GitHub repository, allowing private deployments for users wanting full infrastructure control.

Update history

This review is monitored and refreshed regularly.

  1. May 30, 2026

    Full refresh: re-crawled the official site, audited the latest privacy claims and pricing.

  2. March 31, 2026

    Updated terms date confirmed: last revised 1 May 2026 with new fair-use provisions.

  3. January 31, 2026

    Pricing revised: Basic now $9/month, Pro $27/month, Enterprise $69/month with annual discounts.

  4. July 13, 2025

    Free tier limits clarified: max requests trigger 410 Gone or 429 Too Many Requests responses.

  5. April 2, 2025

    SSO login added as alternative to password-based account creation on registration page.

  6. March 12, 2025

    Security profile reaffirmed: Gridinsoft scan April 2026 reports zero detections, 10.2-year domain age.

  7. February 20, 2025

    Initial review published.

Community reviews

5 user reviews

mo

moneromaxi

May 14, 2026

Perfect for quick XMR payment webhook testing. No account, no email, no trail. The random URL expires which is actually a feature for opsec.

an

anon_trader

April 24, 2026

Used the free tier for months for API debugging. Clean interface, instant results. Only wish they took crypto for Pro so I could keep URLs permanent without linking identity.

pr

privacyfirst

November 8, 2025

Self-hosted the GitHub version on my VPS. Took 20 minutes. Now I have full control and zero third-party logging. The open-source core is solid.

de

devnull_42

April 2, 2025

Hit the free request cap during a heavy testing day and lost incoming data. Fine for light use but the hard cutoff is frustrating. Upgrading requires card details.

cy

cypher_punk

March 7, 2025

Danish jurisdiction is a plus for GDPR. The Custom Actions builder is surprisingly capable for a tool that needs no signup. Wish the CSV export was free though.

Related services