Enforcement of HTTPS for New Event Webhook Configurations

Beginning October 2025, Twilio SendGrid will require HTTPS for all new webhook configurations created through the SendGrid Console or API. This update strengthens webhook security and ensures event data is transmitted over encrypted channels.

SendGrid Console: When configuring a new webhook URL under Settings > Mail Settings > Event Webhook, only HTTPS URLs will be accepted. 

API: Requests to create webhook configurations via the API must use an HTTPS endpoint. Attempts to submit a new webhook with an HTTP URL will return a validation error.

Upcoming Enforcement for Existing Webhooks: On February 11, 2026 all existing webhook configurations must use HTTPS. After this date, any webhook still using an HTTP endpoint will stop receiving event data until it is updated to HTTPS. 

We recommend reviewing your existing webhook configurations and updating any HTTP endpoints ahead of this change to ensure uninterrupted event delivery.