hubspot

HackerOneView on HackerOne
RawAI Enhanced
15
In Scope
6
Out of Scope
In-Scope Assets (15)
Out-of-Scope Assets (6)
AssetCategoryBounty
connect.comURLNo
events.hubspot.comURLNo
ir.hubspot.comURLNo
shop.hubspot.comURLNo
thespot.hubspot.comURLNo
trust.hubspot.comURLNo
Scope Changes (58)
Mar 11, 2026
ChangeAssetCategoryScopeTime
Addedhubspot.netURLIn Scope16:41
Addedhubspot.netURLIn Scope16:41
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhubspot android mobile appANDROIDIn Scope19:20
Addedhubspot ios mobile appIOSIn Scope19:20
Addedapi*.hubspot.comWILDCARDIn Scope19:20
Addedconnect.comURLOut of Scope19:20
Addedcustomer connected domainOTHERIn Scope19:20
Addedapp*.hubspot.comWILDCARDIn Scope19:20
Addedtrust.hubspot.comURLOut of Scope19:20
Addedir.hubspot.comURLOut of Scope19:20
Added*.hs-sites(-eu1)?.comWILDCARDIn Scope19:20
Added*.hs-sites(-eu1)?.comWILDCARDIn Scope19:20
Added*.hubspotpagebuilder.comWILDCARDIn Scope19:20
Addedhubspot sales office 365 add-inOTHERIn Scope19:20
Addedother hubspot-owned (sub)domains not listed as out of scopeOTHERIn Scope19:20
Addedshop.hubspot.comURLOut of Scope19:20
Addedthespot.hubspot.comURLOut of Scope19:20
Added*.hubspotpagebuilder.euWILDCARDIn Scope19:20
Addedapi*.hubapi.comWILDCARDIn Scope19:20
Addedevents.hubspot.comURLOut of Scope19:20
Addedchatspot.aiURLIn Scope19:20
Added*.hubspotemail.netWILDCARDIn Scope19:20
Addedcustomer portalOTHERIn Scope19:20
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedshop.hubspot.comURLOut of Scope00:48
Addedtrust.hubspot.comURLOut of Scope00:48
Addedthespot.hubspot.comURLOut of Scope00:48
Added*.hubspotemail.netWILDCARDIn Scope00:48
Added*.hs-sites(-eu1)?.comWILDCARDIn Scope00:48
Added*.hs-sites(-eu1)?.comWILDCARDIn Scope00:48
Added*.hubspotpagebuilder.euWILDCARDIn Scope00:48
Addedapp*.hubspot.comWILDCARDIn Scope00:48
Addedapi*.hubspot.comWILDCARDIn Scope00:48
Addedchatspot.aiURLIn Scope00:48
Addedevents.hubspot.comURLOut of Scope00:48
Addedcustomer connected domainOTHERIn Scope00:48
Addedhubspot android mobile appANDROIDIn Scope00:48
Addedhubspot ios mobile appIOSIn Scope00:48
Addedhubspot sales office 365 add-inOTHERIn Scope00:48
Addedapi*.hubapi.comWILDCARDIn Scope00:48
Addedconnect.comURLOut of Scope00:48
Addedcustomer portalOTHERIn Scope00:48
Addedother hubspot-owned (sub)domains not listed as out of scopeOTHERIn Scope00:48
Addedir.hubspot.comURLOut of Scope00:48
Added*.hubspotpagebuilder.comWILDCARDIn Scope00:48
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedchatspot.aiURLIn Scope21:40
Removed*.hubspotemail.netWILDCARDIn Scope21:40
Removed*.hs-sites(-eu1)?.comWILDCARDIn Scope21:40
Removed*.hubspotpagebuilder.comWILDCARDIn Scope21:40
Removed*.hubspotpagebuilder.euWILDCARDIn Scope21:40
Removedcustomer portalOTHERIn Scope21:40
Removedcustomer connected domainOTHERIn Scope21:40
Removedhubspot android mobile appANDROIDIn Scope21:40
Removedhubspot ios mobile appIOSIn Scope21:40
Removedhubspot sales office 365 add-inOTHERIn Scope21:40
Removedother hubspot-owned (sub)domains not listed as out of scopeOTHERIn Scope21:40
Removedapp*.hubspot.comWILDCARDIn Scope21:40
Removedapi*.hubspot.comWILDCARDIn Scope21:40
Removedapi*.hubapi.comWILDCARDIn Scope21:40