Webhook payloads differ between Settings test options and naturally triggered events

[wv-jessejjohnson]

Webhook test payloads sent from Settings do not match the schema of naturally triggered webhook payloads.

This makes the test feature unreliable for validating real integrations, since the detections objects in the test payload use a different structure, field names, and value formatting than production payloads.

Naturally triggered payload:

{
  "url": "https://www.target.com/",
  "hostname": "www.target.com",
  "title": "Target : Expect More. Pay Less.",
  "favicon": "https://www.google.com/s2/favicons?domain=www.target.com&sz=64",
  "detections": [
    {
      "detected": true,
      "confidence": 90,
      "matches": [
        {
          "type": "url",
          "pattern": "/telemetry",
          "value": "/telemetry",
          "fullUrl": "https://api.target.com/telemetry_data/v1/traces?key=5622b71fe94d55e17b492fa9e2b07dbc69f68c4f",
          "resourceType": "xmlhttprequest",
          "method": "POST",
          "confidence": 90,
          "description": "AWS WAF telemetry endpoint"
        }
      ],
      "detectionMethods": ["url"],
      "detector": {
        "name": "AWS WAF",
        "icon": "aws_official.png",
        "id": "detect-aws-waf",
        "description": "Amazon Web Services Web Application Firewall with bot control"
      },
      "category": "antibot"
    }
  ],
  "timestamp": "2026-04-01T19:13:52.354Z",
  "count": 13
}

Test payload from Settings:

{
  "url": "https://example.com/test-page",
  "hostname": "example.com",
  "title": "Test Page - Webhook Test",
  "favicon": "https://www.google.com/s2/favicons?domain=example.com&sz=64",
  "detections": [
    {
      "id": "test-detector",
      "name": "Test Detector",
      "category": "Anti-Bot",
      "confidence": 95,
      "color": "#F48120",
      "methods": ["dom", "cookie"]
    }
  ],
  "timestamp": "2026-04-01T19:39:41.141Z",
  "count": 1
}