diff --git a/src/SignatureValidator/DefaultSignatureValidator.php b/src/SignatureValidator/DefaultSignatureValidator.php
index 5cad016..a74b700 100644
--- a/src/SignatureValidator/DefaultSignatureValidator.php
+++ b/src/SignatureValidator/DefaultSignatureValidator.php
@@ -24,6 +24,6 @@ public function isValid(Request $request, WebhookConfig $config): bool
 
         $computedSignature = hash_hmac('sha256', $request->getContent(), $signingSecret);
 
-        return hash_equals($signature, $computedSignature);
+        return hash_equals($computedSignature, $signature);
     }
 }