Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://www.hubspot.com/

92%

Strong protections

Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

hubspot.com security check

Name: hubspot.com security check — Strong protections | Wordle
Item: hubspot.com
Rating: 92
Author: Wordle

Public OSINT valuation for hubspot.com: grade A (92/100). Title signal “HubSpot | Software & Tools for your Business - Homepage”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.

/100

Grade A

Company website · Services · Social

Company website

https://www.hubspot.com/

Services & products

Free HubSpot CRM https://www.hubspot.com/products/crm
Overview of all products https://www.hubspot.com/products/get-started
Free and premium plans https://www.hubspot.com/products/marketing
Free and premium plans https://www.hubspot.com/products/sales
Free and premium plans https://www.hubspot.com/products/service
Free and premium plans https://www.hubspot.com/products/content
Free and premium plans https://www.hubspot.com/products/data
Free and premium plans https://www.hubspot.com/products/revenue
Learn more https://www.hubspot.com/products/crm/ai-crm
Learn more https://www.hubspot.com/products/artificial-intelligence
Learn more https://www.hubspot.com/products/crm/starter
Learn more https://www.hubspot.com/products/aeo
See all integrations https://ecosystem.hubspot.com/marketplace/apps

Social & LinkedIn

No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Wordle Official Security Report badge -->
<a href="https://wordle.review/hubspot.com/#security-report" title="Wordle Official Security Report for hubspot.com" rel="noopener"><img src="https://wordle.review/security-check/assets/official-security-report-seal-v20261102w.png" alt="Wordle Official Security Report · score 92/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for hubspot.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP104.17.91.187
ASNAS13335
HostingCloudflare, Inc.
GeoSan Francisco, California, United States

Query
hubspot.comRequested hostname
IP
104.17.91.187San Francisco, California, United States
ASN
AS13335Cloudflare, Inc.
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarMarkMonitor Inc.

Registered2005-02-06

Domain age21 years 9 mo

Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored hubspot.com

Positive signals

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie includes Secure and HttpOnly flags.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
RDAP domain record available (hubspot.com).

Risk signals

No elevated risk signals recorded in this pass.

Findings

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie includes Secure and HttpOnly flags.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
robots.txt is publicly available.
RDAP domain record available (hubspot.com).
Final HTTP status 200 at https://www.hubspot.com/.

Technical details

DNS

resolved

A: 104.17.91.187, 104.17.92.187
AAAA: 2606:4700::6811:5cbb, 2606:4700::6811:5bbb
PTR: —
error: —

TLS / certificate

version: TLSv1.3
cipher: TLS_AES_256_GCM_SHA384
issuer: Google Trust Services
notAfter: Dec 10 23:26:16 2026 GMT
SAN sample: hubspot.com, *.hubspot.com
error: —

HTTP & security headers

5 present

finalUrl: https://www.hubspot.com/
status: 200
server: cloudflare
x-powered-by: —
present: content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
missing: permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure: True
cookie HttpOnly: True

Tech fingerprint (public)

passive

title: HubSpot | Software & Tools for your Business - Homepage
generator: HubSpot
tech: Google Analytics
script hosts: www.hubspot.com
description: HubSpot

Company presence (crawl links)

extracted

companyWebsite: https://www.hubspot.com/
serviceLinks: Free HubSpot CRM: https://www.hubspot.com/products/crm, Overview of all products: https://www.hubspot.com/products/get-started, Free and premium plans: https://www.hubspot.com/products/marketing, Free and premium plans: https://www.hubspot.com/products/sales, Free and premium plans: https://www.hubspot.com/products/service, Free and premium plans: https://www.hubspot.com/products/content, Free and premium plans: https://www.hubspot.com/products/data, Free and premium plans: https://www.hubspot.com/products/revenue, Learn more: https://www.hubspot.com/products/crm/ai-crm, Learn more: https://www.hubspot.com/products/artificial-intelligence, Learn more: https://www.hubspot.com/products/crm/starter, Learn more: https://www.hubspot.com/products/aeo
socialLinks: none found

RDAP / registration

rdap

domain: hubspot.com
registrar: MarkMonitor Inc.
created: 2005-02-06T20:02:28Z
expires: 2027-02-06T20:02:28Z
nameservers: jerry.ns.cloudflare.com, yolanda.ns.cloudflare.com
status: client delete prohibited, client transfer prohibited, client update prohibited
error: —

Public well-known

passive

/.well-known/security.txt: HTTP 200 · found
/robots.txt: HTTP 200 · found
/security.txt: HTTP 404

Analyzed 2026-11-02T15:48:22Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com