Honest, flat pricing

Delivery is second-level precise — best-effort, not a hard guarantee. We apply Latency-Aware Early Firing, measuring your endpoint's average round-trip time and firing that much earlier so it lands close to the scheduled second. Because networks are inherently variable, we publish measured punctuality rather than promise an exact instant.

Yes. Payloads are encrypted at rest with AES-256-GCM and decrypted only in memory, exactly at fire time — decrypted plaintext is never written to logs, databases, or error messages. Every outgoing webhook also carries an HMAC signature header so the receiver can verify its authenticity.

We retry automatically with exponential backoff — up to five times on Free and ten on paid plans. Once retries are exhausted the job moves to a Dead Letter Queue and is marked 'dead', and paid plans get a Slack, Discord, or Email alert. Retries are idempotent, and an idempotency_key prevents duplicate delivery.

No — targets must use HTTPS on port 80 or 443, and we block any address that resolves to a private, reserved, or cloud-metadata range (such as 169.254.169.254). Just before firing we re-resolve DNS to re-check the destination, and we never follow redirects. SSRF protection is a non-negotiable default.

Yes, if you mainly need scheduled, signed webhooks. SendItWhenever is a flat $19/month alternative to QStash's $180/month flat plan, with no usage-based surprises — and no heavy infrastructure like Kafka or EventBridge, just three lines of SDK. QStash itself is excellent for general-purpose messaging.

You can cancel your monthly subscription at any time and keep access until the end of the current billing cycle. Payments — including tax and VAT — are handled by Lemon Squeezy, our Merchant of Record. See our Refund & Cancellation page for the full details.