Attack report
Expand a row to see what was attempted and which control should stop it.
Why the protected pass works
The lab checks the same events against a reference handler with replay, amount, and duplicate-event safeguards.
Signature verification here is a test fixture. A real integration must verify the webhook with PayPal and reconcile against its own order record.
Run log
- —Waiting for a run.
Scope: The dashboard simulates reference handlers. The separate IDE agent performs read-only heuristic scans; it does not execute or edit your payment integration, send real webhook events, or certify security.