HookGet vs Convoy (2026)
A bi-directional webhook gateway, open-core, available either self-hosted or as their cloud.
In short
- Choose HookGet if: You would rather not operate it, and you want breakers, per-endpoint retries, portal links, transformations and rotation without a $999 licence key on top.
- Choose Convoy if: You want to self-host an open-core gateway on your own hardware, or you want their cloud with SOC 2 and SAML.
- Both sign with, or are compatible with, Standard Webhooks — so your consumers usually do not change.
- The verdict: Convoy if you want to run an open-core gateway on your own hardware and can live inside the Community edition. HookGet if you would rather not operate it, or if the Premium feature list is the one you need.
What a month costs, both ways
The first thing worth knowing, because it is the thing that moves. Every figure is from that vendor's own published pricing, read on 20 August 2026; ours is computed from our plans rather than typed here.
| A month of… | HookGet | Convoy |
|---|---|---|
| 2 million deliveries | $199 on Pro | $999 Premium licence, plus your own servers |
| 10 million deliveries | $399 on Pro | $999 Premium licence, plus your own servers |
| 20 million deliveries | $449 on Scale | $999 Premium licence, plus your own servers |
| 50 million deliveries | $809 on Scale | $999 Premium licence, plus your own servers |
At a glance
Every cell in the Convoy column links to the page it was read from. The rows where we lose are in the table too — a comparison you cannot check is an advertisement.
| Capability | HookGet | Convoy |
|---|---|---|
| First paid step | ✅ $199 a month, managed, including 2 million deliveries | ❌ $999 a month for the Premium self-hosted licence — before the hardware you run it on source |
| Persistent free tier | ✅ 10,000 deliveries a month, managed, forever — and it blocks rather than bills | ℹ️ Free forever self-hosted; the cloud is a 14-day trial at 100 events a day source |
| Who operates it | ✅ We do | ℹ️ You do, unless you take their cloud source |
| Consumer portal | ✅ Embeddable, white-label and self-service, every plan | ❌ Portal links and white-labelling are Premium ($999) source |
| Transformations | ℹ️ Declarative, every plan — never customer JavaScript | ❌ JavaScript transformations are Premium source |
| Filtering | ✅ Event type and payload attributes, every plan | ✅ Dynamic filtering, part of the product source |
| Circuit breaking | ✅ 50 consecutive failures or 410 Gone, every plan | ❌ Endpoint circuit breaking is Premium source |
| Roles and permissions | ✅ Four roles with an audit log, every plan | ❌ RBAC is Premium source |
| Secret rotation | ✅ Per endpoint, with an overlap window | ✅ Rolling secrets, part of the product source |
| Egress safety | ✅ Two independent layers against reaching private networks | ✅ SSRF protection, part of the product source |
| OpenTelemetry | ✅ Traces on every plan, OTLP over HTTP | ℹ️ OpenTelemetry export is Premium source |
| Self-hosting | ℹ️ Runs and is verified, but has no public licence yet | ✅ Open core, free forever, Community edition source |
| Compliance | ℹ️ A published control list, SOC 2 committed on contract need | ✅ SOC 2 and GDPR on their cloud source |
| Uptime SLA | ❌ None published — measured uptime is public at api.hookget.com/status, a contractual figure is not | ✅ 99.999% on their cloud source |
| SSO / SAML | ❌ Not built | ℹ️ SAML SSO is Enterprise, above Premium source |
How to read this page. Every claim about another product below was read off that company's own public pages on 20 August 2026, and each one links to the page it came from — check it yourself, that is what the links are for. Pricing and features move without anyone telling us, so our build fails if this page goes more than 120 days without a re-check. Everything stated about HookGet is something you can verify in the product today, including the rows where we lose. If we have something wrong, tell us and it is fixed the same day.
Where Convoy is stronger
- The Community edition is free forever, self-hosted, and includes incoming and outgoing webhooks, automatic retries and message-broker support. source
- Dynamic filtering, rolling secrets and SSRF protection are part of the product, not an add-on. source
- Their cloud carries SOC 2 and GDPR compliance, SSO and SAML, private networking, RBAC and a 99.999% uptime SLA. source
- The same gateway runs in both places, and they say so plainly — you can move between cloud and self-hosted. source
Trade-offs to weigh
- Portal links, JavaScript transformations, RBAC, endpoint circuit breaking, white-labelling and OpenTelemetry export are Premium — $999 a month for a self-hosted licence key. source
- SAML SSO, a dedicated SLA and SOC 2 support are Enterprise, above Premium. source
- The managed cloud is a 14-day trial capped at one project, one user and 100 events a day — there is no persistent free cloud tier. source
- Self-hosting means operating the gateway and its dependencies, PostgreSQL among them. source
Where the approach differs — on purpose
Same jobs, different techniques. Each of these is a decision we will defend, with the alternative named for the cases where you should take it — including when that alternative is Convoy.
| Area | The HookGet way |
|---|---|
| Transformations | Declarative, never customer code. Six auditable ops cover the real cases with nothing to escape from — a worker that runs customer JS has every other customer in its blast radius. Need arbitrary logic? Your publisher is the right place for it |
| Filtering | A fixed vocabulary of comparisons over dot-paths, not an expression language: it cannot loop, cannot allocate, and is bounded by the size of the filter rather than by anything in the payload. A missing path matches nothing, so a typo stops deliveries visibly instead of quietly delivering the firehose |
| Local development | A signed listener instead of a tunnel. Your handler verifies real signatures locally and nothing opens your machine to the internet — the reason security reviews wave it through. Prefer push? Any tunnel you already trust works in front of a test endpoint |
| Compliance | Controls you can check today over a badge that attests last year: the compliance page lists every control in production, and SOC 2 is committed the moment a contract needs it |
| Overage | Metering, never blocking, at $25 per additional million on Pro and $12 on Scale — and the free tier blocks rather than bills, so trying it can never cost money |
| Self-hosting | The same engine, one compose file — built and verified end to end on ARM64: migrations, a signed delivery and real SMTP. Available on request today; the public licence is the one thing still to settle |
When to choose Convoy
You want to self-host an open-core gateway on your own hardware, or you want their cloud with SOC 2 and SAML. If any of those is load-bearing for you, Convoy is the better product and we would rather you knew it now than three weeks into a migration.
When to choose HookGet
You would rather not operate it, and you want breakers, per-endpoint retries, portal links, transformations and rotation without a $999 licence key on top. You also get per-endpoint payload filters, dead letters with replay, gap repair, an embeddable white-label portal and both signature schemes — on every plan, including the free one.
Moving between them
Consumers that verify Standard Webhooks signatures do not change. What needs planning is the destination list, the secrets and any capability above that we do not have. The migration guide covers the patterns, including running both in parallel before you commit.
Questions
Is HookGet a drop-in replacement for Convoy?
For delivery and signatures, largely yes — both sign with or are compatible with Standard Webhooks, so consumers usually need no change. Anything in the table above marked ❌ on our side is not a drop-in, and the honest answer is to read those rows before you plan a move.
When should I stay with Convoy?
You want to self-host an open-core gateway on your own hardware, or you want their cloud with SOC 2 and SAML.
Is HookGet cheaper than Convoy?
Against their cloud and their $999 Premium licence, yes. Against the Community edition on hardware you already own, no — that is free, and the cost is your operating time.
How do the retry policies differ?
HookGet defaults to eight attempts over about 21 hours and lets you set the schedule per endpoint, which matters when one destination needs a tighter or looser rhythm than the rest. Check the current schedule in their documentation — it is the kind of detail that changes.
What does HookGet not have that I should know about before switching?
No published uptime SLA, no SOC 2 report (a published control list instead), no SSO with SAML, no Terraform provider, no cross-endpoint FIFO ordering, and no JavaScript transformations — that last one a deliberate position rather than a gap. Public self-hosting runs and is verified but has no licence yet, so it is available on request rather than as a download.
Start delivering webhooks today
Recreate one destination, publish one event, and compare the two timelines side by side. That is an afternoon, and it settles the question better than this page can.
Create a free account See pricing
10,000 deliveries a month free, no credit card. The free tier blocks rather than bills, so trying the product cannot produce an invoice — which is not true of every free tier in this category.
Verified 20 August 2026 against: Convoy's site. Re-checked at least every 120 days.