# Webhook Detection

{% hint style="info" %}
**Premium Feature** — Webhook detection requires a Premium subscription. [Compare plans →](/securitybot-knowledge-hub/plans-and-pricing/plans-and-pricing.md)
{% endhint %}

Webhooks are a common tool used in Discord server attacks. Malicious actors often create webhooks to post scam messages that look legitimate, bypassing normal user restrictions. SecurityBot helps protect your community by automatically detecting webhook activity and alerting moderators instantly.

***

### How It Works

* **Automatic Detection**: Logs are created automatically whenever a webhook is **created** or **updated** in your server.
* **Instant Action Options**: Each log includes quick-action buttons to:
  * **Delete the Webhook**
  * **Kick the User**
  * **Ban the User**
* **No Setup Required**: This feature is enabled by default. No configuration or commands are needed.

***

### What You'll See

When a webhook is created or changed, SecurityBot will post a log showing:

* Who created or modified the webhook
* The webhook’s name and channel
* The user ID and timestamp
* Quick-action buttons to respond immediately

{% hint style="danger" %}
If the webhook appears suspicious or unauthorized, click **Delete Webhook** to remove it instantly.
{% endhint %}

***

### Best Practices

* **Always review webhook logs** if you don’t recognize the creator or channel
* **Remove unused or unexpected webhooks** as a precaution
* **Limit webhook permissions** to trusted roles only

***

Next up: Explore additional protective tools in [Anti-Impersonation Tools](/securitybot-knowledge-hub/bot-guide/anti-impersonation-tools.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://securitybot.gitbook.io/securitybot-knowledge-hub/bot-guide/scam-prevention-features/webhook-detection.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.