hubspot
15
In Scope
6
Out of Scope
In-Scope Assets (15)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.hs-sites(-eu1)?.com | WILDCARD | Yes | ||
| *.hubspotemail.net | WILDCARD | Yes | ||
| *.hubspotpagebuilder.com | WILDCARD | Yes | ||
| *.hubspotpagebuilder.eu | WILDCARD | Yes | ||
| Customer Connected Domain | OTHER | Yes | - | |
| Customer Portal | OTHER | Yes | - | |
| HubSpot Android Mobile App | ANDROID | Yes | - | |
| HubSpot Sales Office 365 add-in | OTHER | Yes | - | |
| HubSpot iOS Mobile App | IOS | Yes | - | |
| Other HubSpot-owned (sub)domains not listed as Out of Scope | OTHER | Yes | - | |
| api*.hubapi.com | WILDCARD | Yes | ||
| api*.hubspot.com | WILDCARD | Yes | ||
| app*.hubspot.com | WILDCARD | Yes | ||
| chatspot.ai | URL | Yes | ||
| hubspot.net | URL | Yes |
Out-of-Scope Assets (6)
| Asset | Category | Bounty | |
|---|---|---|---|
| connect.com | URL | No | |
| events.hubspot.com | URL | No | |
| ir.hubspot.com | URL | No | |
| shop.hubspot.com | URL | No | |
| thespot.hubspot.com | URL | No | |
| trust.hubspot.com | URL | No |
Scope Changes (58)
Mar 11, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | hubspot.net | URL | In Scope | 16:41 |
| Added | hubspot.net | URL | In Scope | 16:41 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | hubspot android mobile app | ANDROID | In Scope | 19:20 |
| Added | hubspot ios mobile app | IOS | In Scope | 19:20 |
| Added | api*.hubspot.com | WILDCARD | In Scope | 19:20 |
| Added | connect.com | URL | Out of Scope | 19:20 |
| Added | customer connected domain | OTHER | In Scope | 19:20 |
| Added | app*.hubspot.com | WILDCARD | In Scope | 19:20 |
| Added | trust.hubspot.com | URL | Out of Scope | 19:20 |
| Added | ir.hubspot.com | URL | Out of Scope | 19:20 |
| Added | *.hs-sites(-eu1)?.com | WILDCARD | In Scope | 19:20 |
| Added | *.hs-sites(-eu1)?.com | WILDCARD | In Scope | 19:20 |
| Added | *.hubspotpagebuilder.com | WILDCARD | In Scope | 19:20 |
| Added | hubspot sales office 365 add-in | OTHER | In Scope | 19:20 |
| Added | other hubspot-owned (sub)domains not listed as out of scope | OTHER | In Scope | 19:20 |
| Added | shop.hubspot.com | URL | Out of Scope | 19:20 |
| Added | thespot.hubspot.com | URL | Out of Scope | 19:20 |
| Added | *.hubspotpagebuilder.eu | WILDCARD | In Scope | 19:20 |
| Added | api*.hubapi.com | WILDCARD | In Scope | 19:20 |
| Added | events.hubspot.com | URL | Out of Scope | 19:20 |
| Added | chatspot.ai | URL | In Scope | 19:20 |
| Added | *.hubspotemail.net | WILDCARD | In Scope | 19:20 |
| Added | customer portal | OTHER | In Scope | 19:20 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | shop.hubspot.com | URL | Out of Scope | 00:48 |
| Added | trust.hubspot.com | URL | Out of Scope | 00:48 |
| Added | thespot.hubspot.com | URL | Out of Scope | 00:48 |
| Added | *.hubspotemail.net | WILDCARD | In Scope | 00:48 |
| Added | *.hs-sites(-eu1)?.com | WILDCARD | In Scope | 00:48 |
| Added | *.hs-sites(-eu1)?.com | WILDCARD | In Scope | 00:48 |
| Added | *.hubspotpagebuilder.eu | WILDCARD | In Scope | 00:48 |
| Added | app*.hubspot.com | WILDCARD | In Scope | 00:48 |
| Added | api*.hubspot.com | WILDCARD | In Scope | 00:48 |
| Added | chatspot.ai | URL | In Scope | 00:48 |
| Added | events.hubspot.com | URL | Out of Scope | 00:48 |
| Added | customer connected domain | OTHER | In Scope | 00:48 |
| Added | hubspot android mobile app | ANDROID | In Scope | 00:48 |
| Added | hubspot ios mobile app | IOS | In Scope | 00:48 |
| Added | hubspot sales office 365 add-in | OTHER | In Scope | 00:48 |
| Added | api*.hubapi.com | WILDCARD | In Scope | 00:48 |
| Added | connect.com | URL | Out of Scope | 00:48 |
| Added | customer portal | OTHER | In Scope | 00:48 |
| Added | other hubspot-owned (sub)domains not listed as out of scope | OTHER | In Scope | 00:48 |
| Added | ir.hubspot.com | URL | Out of Scope | 00:48 |
| Added | *.hubspotpagebuilder.com | WILDCARD | In Scope | 00:48 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | chatspot.ai | URL | In Scope | 21:40 |
| Removed | *.hubspotemail.net | WILDCARD | In Scope | 21:40 |
| Removed | *.hs-sites(-eu1)?.com | WILDCARD | In Scope | 21:40 |
| Removed | *.hubspotpagebuilder.com | WILDCARD | In Scope | 21:40 |
| Removed | *.hubspotpagebuilder.eu | WILDCARD | In Scope | 21:40 |
| Removed | customer portal | OTHER | In Scope | 21:40 |
| Removed | customer connected domain | OTHER | In Scope | 21:40 |
| Removed | hubspot android mobile app | ANDROID | In Scope | 21:40 |
| Removed | hubspot ios mobile app | IOS | In Scope | 21:40 |
| Removed | hubspot sales office 365 add-in | OTHER | In Scope | 21:40 |
| Removed | other hubspot-owned (sub)domains not listed as out of scope | OTHER | In Scope | 21:40 |
| Removed | app*.hubspot.com | WILDCARD | In Scope | 21:40 |
| Removed | api*.hubspot.com | WILDCARD | In Scope | 21:40 |
| Removed | api*.hubapi.com | WILDCARD | In Scope | 21:40 |