diff --git a/samples/positive/development/webhack_example.json b/samples/positive/development/webhack_example.json
new file mode 100644
index 0000000..4940cc8
--- /dev/null
+++ b/samples/positive/development/webhack_example.json
@@ -0,0 +1,30 @@
+{
+  "Version": "development",
+  "ReporterInfo": {
+    "ReporterOrg": "ExampleOrg",
+    "ReporterOrgDomain": "example.com",
+    "ReporterOrgEmail": "reports@example.com",
+    "ReporterContactEmail": "contact@example.com",
+    "ReporterContactName": "Mr. Example",
+    "ReporterContactPhone": "+ 01 000 1234567"
+  },
+  "Disclosure": true,
+  "Report": {
+    "ReportClass": "Activity",
+    "ReportType": "WebHack",
+    "Date": "2018-02-05T14:17:10Z",
+    "SourceIp": "192.0.2.59",
+    "SourcePort": 443,
+    "Ongoing": true,
+    "ThreatActor": "malicious devil",
+    "Samples": [
+      {
+        "ContentType": "text/plain",
+        "Base64Encoded": false,
+        "Description": "Requested page does't exist",
+        "Payload": "GET /login.php 404"
+      }
+    ],
+    "CVE": "CVE-1234-56789"
+  }
+}
diff --git a/schemas/development/webhack.schema.json b/schemas/development/webhack.schema.json
new file mode 100644
index 0000000..18492b7
--- /dev/null
+++ b/schemas/development/webhack.schema.json
@@ -0,0 +1,42 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://raw.githubusercontent.com/xarf/schema-discussion/master/schemas/development/webhack.schema.json",
+  "title": "XARF WEBHACK",
+  "description": "A format to report Web-Hack events.",
+  "allOf": [
+    {
+      "$ref": "xarf_shared.schema.json#/properties/XarfBase"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "Report": {
+          "allOf": [
+            {
+              "$ref": "xarf_shared.schema.json#/properties/IpAndUrlBasedReport"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "ReportClass": {
+                  "type": "string",
+                  "enum": ["Activity"]
+                },
+                "ReportType": {
+                  "type": "string",
+                  "enum": ["WebHack"]
+                }
+              }
+            },
+            {
+              "$ref": "xarf_shared.schema.json#/properties/CommonProps"
+            },
+            {
+              "$ref": "xarf_shared.schema.json#/properties/CVE"
+            }
+          ]
+        }
+      }
+    }
+  ]
+}
diff --git a/schemas/development/xarf.schema.json b/schemas/development/xarf.schema.json
index c91fcf2..344062c 100644
--- a/schemas/development/xarf.schema.json
+++ b/schemas/development/xarf.schema.json
@@ -51,6 +51,9 @@
     },
     {
       "$ref": "harassment.schema.json"
+    },
+    {
+      "$ref": "webhack.schema.json"
     }
   ]
 }