Back to browse
GitHub Repository

🪝 One-call webhook signature verification for any provider, with replay protection and zero dependencies.

2 starsGo

Trusthook – verify webhook signatures for 18 Go providers in one call

by eben-vranken·Jun 9, 2026·1 point·0 comments

AI Analysis

●●SolidSolve My ProblemCozy

Zero-dependency Go lib unifying webhook verification across 18 providers.

Strengths
  • Pure stdlib with no external dependencies reduces supply chain risk.
  • Handles provider-specific quirks like hex vs base64 encoding automatically.
  • Built-in replay protection with constant-time comparison prevents timing attacks.
Weaknesses
  • Only 18 providers supported; adding new ones requires PRs to the library.
  • Most major providers already offer official SDKs with verification built in.
Target Audience

Go backend developers handling webhooks

Similar To

Svix · Standard Webhooks · provider-specific SDKs

Similar Projects

Security●●●Banger

verifiable API and MCP calls

Signed receipts for AI agent actions solve an accountability problem that didn't exist before MCP.

Zero to OneBig Brain
jithinraj
311mo ago
Security●●Solid

AIP – An open protocol for verifying what AI agents are allowed to do

OAuth + TLS for AI agents—eight-step verification pipeline, but adoption depends on framework integration.

Big BrainSolve My Problem
theaniketgiri
123mo ago