Jitterflow

How Jitterflow works

A plain, factual look at what Jitterflow does and how it fits alongside other webhook-delivery tools — no comparison-table claims about anyone else's pricing, uptime, or feature set, just what Jitterflow itself does and what it's compatible with.

What Jitterflow does

Jitterflow sits between your app and the webhooks it sends. Every delivery is spread across a computed jitter window sized to the destination, instead of firing all at once — that's what stops the receiver's own rate limiter from 429'ing you. Failures retry with backoff, and anything that exhausts its retries lands in a hosted dead-letter queue with one-click replay, instead of vanishing silently.

Delivery is isolated per destination, so one slow or hanging receiver never backs up delivery to your other targets. Destination URLs are validated against private/internal address ranges on every create, edit, and dispatch — an SSRF guard, not just a one-time check at setup.

Who it's for

Anyone sending outbound webhooks at a volume where the receiver's rate limit becomes a problem — integration platforms fanning events out to customer-owned URLs, SaaS products notifying their own users, or internal services calling third-party APIs on a webhook-shaped contract. If you can already call a plain HTTP POST, you can point it at a Jitterflow endpoint instead of the final destination.

Protocol compatibility

Every outbound delivery carries Jitterflow's own HMAC signature header alongside Standard Webhooks-shaped headers (svix-id, svix-timestamp, svix-signature) — the same open spec Svix, Hookdeck, and Convoy have adopted, and the format OpenAI, Twilio, and Supabase already sign their own webhooks with. A destination already verifying webhooks from any of those doesn't need custom code to also verify Jitterflow's. Full header-by-header detail, including the one documented deviation from the spec (Jitterflow's outboundSecret isn't whsec_-wrapped like the spec expects), is on Verifying signatures.