Webhook URL Security Policy
April 17, 2026
All webhook URLs registered on the Upstox Developer Platform are validated against our security filter before an app can be created. This policy is in place to protect all Upstox user accounts from potential security threats and unauthorized access.
Why Might a URL Get Blocked?
The following are common reasons a URL may be blocked. This is not an exhaustive list — URLs falling into other categories that do not pass our security filter will also be rejected.
| Category | Description |
|---|---|
| Dynamic DNS | URLs using dynamic DNS services are flagged as these are frequently associated with botnet activity and cyber attacks. |
| Phishing | URLs identified as counterfeit or deceptive pages mimicking legitimate services. |
| Malicious Websites | Domains known to host malware, spyware, or other destructive software. |
| Spam URLs | Domains associated with spam emails or fraudulent content. |
| Proxy Avoidance | URLs linked to anonymous proxy or VPN bypass services. |
What Should You Use Instead?
Use a webhook URL hosted on a stable, established domain with a valid SSL certificate.
If you believe your URL has been incorrectly blocked, please reach out to our support team for a manual review.