whook review
A focused, open-source webhook gateway for durable capture and controlled delivery.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
whook is an open-source webhook gateway for developers and teams receiving inbound events from services such as Stripe, GitHub, Shopify, Slack, and Linear. It captures requests before acknowledging them, forwards events to one or more destinations, retries failed deliveries, and supports inspection, filtering, dead-lettering, and replay. The product is available on Windows, macOS, Linux, and through an API, with a server-rendered dashboard and HTTP API for operational access.
Its strongest fit is webhook delivery control. whook can replay events to all or selected destinations, apply configurable fan-out filters, and use deduplication headers for idempotent capture. Provider signature verification is available for Stripe, GitHub, Shopify, Slack, and Linear. Prometheus metrics and request rate limiting add operational controls, while automatic exponential-backoff retries and dead-lettering provide a defined path for failed deliveries. Teams working with these integrations and needing direct event inspection should find the feature set well aligned with webhook operations.
The trade-off is deployment responsibility. whook is self-hosted, distributed as a static Go binary, and uses SQLite by default, with Postgres supported for scaling. That model suits teams that want control over deployment and data handling, but it is less appropriate for buyers seeking a hosted webhook platform with minimal infrastructure ownership. Choose whook when durable capture, replay, filtering, and self-managed operation matter most; choose an alternative when a managed service, broader platform coverage, or AI features is a priority.
whook pros and cons
- Where it wins
- Durably captures events before provider acknowledgement
- Retries failed deliveries with exponential backoff and dead-lettering
- Supports inspection, filtering, replay, deduplication, and rate limiting
- Where it doesn't
- Requires a self-hosted deployment rather than a managed service
- Provider signature verification covers five named integrations
- AI features are not included
whook fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update