WebhookAuth one-click asymmetric signing

Gives developers reliable webhook auth with asymmetric signatures, no DIY HMAC

Problem

Developers building webhooks find auth is not a solved problem: most producers still use symmetric HMAC, key distribution and rotation are painful, and many teams end up writing fragile DIY verification logic that is easy to get wrong.

Solution

An out-of-the-box webhook auth SDK plus hosted relay: producers sign with a private key, consumers verify with a public key, with a standard signature header, key rotation, and replay protection. The relay forwards and verifies so teams without crypto expertise can integrate in minutes.

Users

Indie developers building open SaaS platforms; backend engineers at small teams that need to receive third-party webhooks

MVP

Multi-language sign/verify SDK (Node and Python first); standard signature header and timestamp spec; hosted relay forwarding and verification; key generation, rotation, and revocation dashboard; retry and logs for failed deliveries

Revenue

SDK free and open source; hosted relay tiered by request volume (free 10k/month, then from $9); team plan with audit logs

Why now

More small teams are building AI tools and API products where webhooks are standard but auth remains painful; asymmetric signing is mature, and a hosted relay gives an indie dev a clear differentiator