Private delivery sends captured webhooks to services reachable through your Tailscale network. Use it when a destination should remain private rather than accepting inbound traffic from the public internet.
Private delivery vs public HTTPS
Standard forwarding delivers to a public https:// URL. Private delivery instead targets a service available through Tailscale, such as an internal hostname or private address and port.
Both destination types use the normal HookDeploy forwarding workflow: configure a destination, receive per-attempt status in request details, and use the destination’s retry controls. Standard public HTTPS forwards use a 15-second delivery timeout.
Customer setup
- Confirm the target service is reachable within your Tailscale network.
- In the HookDeploy dashboard, open the endpoint’s forwarding settings.
- Add a private destination and follow the displayed Tailscale connection instructions.
- Enter the private service address and port.
- Test the destination before relying on it for production traffic.
Keep access controls on the destination service enabled and grant only the network access required for webhook delivery. HookDeploy support can help validate configuration, but you remain responsible for your Tailscale network and service permissions.
Availability and pricing
Private delivery is available on Team and higher plans. Team includes one Tailscale tunnel. Additional tunnels are available for $19 per month each. Check the dashboard or current pricing page for the options available to your organization.
Next steps
- Forwarding — Destination behavior, retries, and result tracking
- Endpoint security — Stored payload protection and organization isolation