To ensure the the webhook events received are from Circleback, you can now choose to verify incoming requests using a signing secret. This is an optional step, but it is recommended for added security.

Go to Settings → Webhook to manage your signing secret and learn more about how to verify incoming requests.