Home
Automations
This topic describes the Automations page and its interface elements. It provides details about automation categories, views, filtering options, and automation card components.
Webhooks
This topic describes how webhooks enable third-party systems to trigger automations. It outlines common uses for out-of-the-box, custom, and cloned automations.
Creating a Webhook
This topic describes how to create a webhook, configure its URL and expiration date, and optionally apply authentication. It also provides guidance on managing exposed or expired webhook URLs.

Important Information
Introduction to Playblocks
This topic introduces the automated response capabilities of PlayBlocks and its integration with collaborative tools. It provides an overview of how PlayBlocks helps protect organizations from cyber attacks.
Getting Started
This topic describes the initial steps required to begin working with PlayBlocks. It provides links to create an account, access the portal, license the product, and onboard services.
Video Tutorials
Overview
This topic describes the Overview page, which displays key information and statistics about Playblocks. It explains how to access the Overview page and view its data.
Automations
This topic describes the Automations page and its interface elements. It provides details about automation categories, views, filtering options, and automation card components.
- Automation Parameters and Flowchart
  This topic describes the Automation Parameters and Flowchart page and outlines the items displayed in the interface. It also provides steps to access the automation details.
- Predefined Automations
  This topic lists predefined automations available in the system. It provides links to automation actions triggered by various security detections and events.
- Configuring the Automation Parameters
  This topic describes how to configure automation parameters in Playblocks and how to reset them to default values.
- Running the Automation
  This topic describes how to manually run an automation for evaluation and verification purposes. It provides step-by-step instructions for accessing, configuring, and executing an automation.
- Enabling the Automation
  This topic describes how to enable an automation in Playblocks. Automations are enabled by default but can be manually activated.
- Approving, Rejecting or Reverting an Automation Execution
  This task explains how to approve, reject, or revert an automation execution through communication channels or the Pending Actions page.
- Customization in Playblocks
  Playblocks provides flexible customization options to tailor automations according to your organization's needs.
- Webhooks
  This topic describes how webhooks enable third-party systems to trigger automations. It outlines common uses for out-of-the-box, custom, and cloned automations.
  - Triggering an Out-of-the-Box Automation Using Webhooks
    This task explains how to trigger an automation using a webhook. It outlines the required steps to configure and create a webhook.
  - Triggering a Custom Automation Using Webhooks
    This task describes how to trigger a custom automation using a webhook and configure its parameters. It guides users through adding a webhook trigger and defining the example output.
  - Triggering a Cloned Automation Using Webhooks
    This task describes how to trigger a cloned automation using a webhook. It guides you through replacing the trigger and configuring webhook parameters.
  - Creating a Webhook
    This topic describes how to create a webhook, configure its URL and expiration date, and optionally apply authentication. It also provides guidance on managing exposed or expired webhook URLs.
  - Webhook Parameters - Mapping Webhook Payload Fields
    This topic explains how to map incoming webhook payload fields to the expected structure using Webhook Parameters. It describes scenarios where field names or formats differ from the Example Output.
  - Using a Webhook
    This topic describes how to use a webhook after it has been created. It provides step-by-step instructions for configuration and usage.
- Authentications
Monitor
This topic describes the Monitor page, which displays statistics and visual widgets showing automation activity and prevention data. It summarizes the available monitoring views and their functions.
Executions
This topic describes the Executions page and how to access it. It provides an overview of the information shown for executed automations.
Pending Actions
This topic describes the Pending Actions page, which lists automation executions awaiting approval. It also explains how to access this page in Playblocks.
Lists
This topic describes the Lists page, which shows various types of destinations, sources, devices, and identities managed by the system. It explains the purpose of each list category.
Connectors
This topic describes connectors used in Playblocks and explains how they support automatic incident response and collaboration. It also shows how to access the Connectors page and identifies automatically connected products.
Notifications
The Notifications page provides options to manage who receives notifications and how they are delivered. It also displays legends describing available actions and views.
Appendix
This appendix provides links to supporting procedures for integrating various external services with Check Point Playblocks. It lists additional configuration resources for multiple platforms.

Creating a Webhook

This topic describes how to create a webhook, configure its URL and expiration date, and optionally apply authentication. It also provides guidance on managing exposed or expired webhook URLs.

Webhook URL

Each webhook is assigned a unique URL when the webhook is created.
Once generated, you can copy and use this URL in any service or application that needs to trigger the webhook.

Notes -
- The URL cannot be modified.
- This URL is sensitive and should be protected. Do not share or expose it-anyone who has access to the URL can trigger the webhook.
If the URL is exposed:
- Clone the webhook.
- Update any integrations to use the new webhook's URL.
- Delete the old webhook.

Expiration Date

(Optional) Set an expiration date by selecting Expiration Date and choosing the desired date.
Seven days before a webhook expires, and again on the expiration date, you receive a reminder email.
In the portal, expired webhooks are marked in the automation webhooks list.
If a webhook expires:
- Clone the webhook.
- Update any integrations to use the new webhook's URL.
- Delete the old webhook.

Authentication

A webhook may include authentication. Supported types:

Basic Authentication (username and password)
Custom Authentication (custom key-value pair)

We recommend adding authentication for security. Even if someone obtains the webhook URL, they still need valid credentials.

Select an existing authentication from the drop-down list or create a new one.

Click Manage Authentications to open the Authentications page, where you can view details or edit existing authentication settings.

For more information, see Authentications.

03 July 2026

© 2023 - 2026 Check Point Software Technologies Ltd.