> ## Documentation Index
> Fetch the complete documentation index at: https://ngrok.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhooks to On-Prem

> Use ngrok to grant controlled, compliant access by trusted third-party webhook providers to services inside your network.

ngrok lets trusted third-party cloud services like GitHub, Twilio, and Stripe send webhooks to applications running behind your firewall. We verify webhook signatures at our network edge, so only legitimate traffic reaches your applications.

## Why route webhooks this way?

* **Centralize control.** Verification, routing, and secrets live in a single Traffic Policy. Adding a webhook provider means updating one policy, not rolling out code changes to multiple services.
* **Prevent webhook spoofing.** Signatures are verified at the edge for [70+ providers](/docs/traffic-policy/actions/verify-webhook/#supported-providers). Spoofed or tampered requests are rejected before they reach any of your compute.

## Which scenario fits you?

<CardGroup cols={3}>
  <Card title="Behind a firewall" icon="shield-halved" href="/docs/guides/webhooks-to-on-prem/tutorial#6-add-the-guardrail-your-use-case-needs">
    Your service runs on-prem or in a private network that blocks inbound
    connections.
  </Card>

  <Card title="Regulated workloads" icon="file-shield" href="/docs/guides/webhooks-to-on-prem/tutorial#6-add-the-guardrail-your-use-case-needs">
    Your service handles PHI or other regulated data in a cloud container.
  </Card>

  <Card title="Platform-governed" icon="sitemap" href="/docs/guides/webhooks-to-on-prem/tutorial#6-add-the-guardrail-your-use-case-needs">
    A platform team owns service configuration, access, and auth from a single surface.
  </Card>
</CardGroup>

## Next steps

<CardGroup cols={2}>
  <Card title="Full tutorial" icon="book" href="/docs/guides/webhooks-to-on-prem/tutorial">
    Set up one front door that verifies and routes webhooks to a private
    service, then adapt it to your scenario.
  </Card>

  <Card title="Supported providers" icon="plus" href="/docs/traffic-policy/actions/verify-webhook/#supported-providers">
    Browse the 70+ supported webhook providers, including Twilio, Shopify, and
    DocuSign.
  </Card>

  <Card title="How verification works" icon="shield-check" href="/docs/traffic-policy/actions/verify-webhook">
    Read how signature verification proves that a webhook came from the
    provider.
  </Card>

  <Card title="Store secrets securely" icon="lock" href="/docs/traffic-policy/secrets">
    Keep provider signing secrets in an encrypted vault instead of pasting them
    into your policy.
  </Card>
</CardGroup>