Every webhook now includes a signature header. Check it with your signing secret to be sure a request came from us and was not changed on the way.
Signing is on by default for new webhooks. Existing ones can switch it on from their settings.
Next release
Quiet hours for low severity
