# Webhook integration checklist 
For webhooks to work correctly, make sure the following in place before going live:
* HTTPS is used.
* Webhook [signature verification](/webhooks/section/webhook-listener/generation-of-signature) is implemented against the raw request body, without modification.
* A `204/200` response is returned as soon as the signature is confirmed.
* Idempotency is implemented for all operations.
* Error logging and monitoring are configured.
* Sensitive data is not passed in URLs, and technical details are not exposed in error messages.
* Webhook retries are supported in accordance with [Xsolla retry logic](/webhooks/section/webhook-listener/sending-responses-to-webhook).
* The entire integration is documented.