Security Best Practices

Keep endpoint tokens secret, use HTTPS destinations, verify signatures, send idempotency keys, rotate secrets, and use least privilege for BYO database credentials.

Do not email payload bodies. Use event IDs and dashboard links when coordinating incidents.