PentestingHere
Log in Join

HubSpot

HubSpot on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: No
  • Managed by the platform: Yes
  • Average first response: 0 days
  • Average time to resolution: 41.8 days

In scope

  • *.hs-sites(-eu1)?.com
  • *.hubspotemail.net
  • *.hubspotpagebuilder.com
  • *.hubspotpagebuilder.eu
  • Customer Connected Domain
  • Customer Portal
  • HubSpot Android Mobile App
  • HubSpot Sales Office 365 add-in
  • HubSpot iOS Mobile App
  • Other HubSpot-owned (sub)domains not listed as Out of Scope
  • api*.hubapi.com
  • api*.hubspot.com
  • app*.hubspot.com
  • chatspot.ai
  • hubspot.net

Out of scope

  • connect.com
  • events.hubspot.com
  • ir.hubspot.com
  • shop.hubspot.com
  • thespot.hubspot.com
  • trust.hubspot.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback