HookSteadBETA

Lemon Squeezy webhooks, without the lost events

Receive Lemon Squeezy order and subscription webhooks reliably: X-Signature verified on arrival, every event stored, retried and replayable.

Start freeRead the docs

Common problems, solved

Subscription events decide who has access; a missed one leaves a customer locked out.
HookStead keeps every event and retries your endpoint until it answers, so access stays in sync.
Signature checks fail once a framework has parsed the JSON.
HookStead checks X-Signature on the raw bytes; your app verifies one Standard Webhooks signature instead.

Set up in five minutes

  1. 01In Lemon Squeezy, open Settings → Webhooks and add a webhook with your HookStead source URL.
  2. 02Choose a signing secret (6–40 characters) and enter the same value here.
  3. 03Select the events you need and save. Lemon Squeezy signs each request in X-Signature.
How HookStead verifies Lemon Squeezy
Source optionLemon Squeezy (HMAC-SHA256)
Signature headerX-Signature
SchemeHMAC-SHA256 over the raw body, hex-encoded