What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 80; Active program checkbox checked; Bounties minimum displayed $50. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
app*.hubspot.com | WILDCARD | Bounty eligible: Yes |
api*.hubspot.com | WILDCARD | Bounty eligible: Yes |
api*.hubapi.com | WILDCARD | Bounty eligible: Yes |
*.hubspotemail.net | WILDCARD | Bounty eligible: Yes |
*.hs-sites(-eu1)?.com | WILDCARD | Bounty eligible: Yes |
*.hubspotpagebuilder.com | WILDCARD | Bounty eligible: Yes |
*.hubspotpagebuilder.eu | WILDCARD | Bounty eligible: Yes |
chatspot.ai | URL | Bounty eligible: Yes |
hubspot.net | URL | Bounty eligible: Yes |
Customer Connected Domain | OTHER | Bounty eligible: Yes |
HubSpot Sales Office 365 add-in | OTHER | Bounty eligible: Yes |
Customer Portal | OTHER | Bounty eligible: Yes |
Other HubSpot-owned (sub)domains not listed as Out of Scope | OTHER | Bounty eligible: Yes |
HubSpot Android Mobile App | GOOGLE_PLAY_APP_ID | Bounty eligible: Yes |
HubSpot iOS Mobile App | APPLE_STORE_APP_ID | Bounty eligible: Yes |
| Asset | Type | Group / eligibility |
|---|---|---|
connect.com | URL | Bounty eligible: No |
shop.hubspot.com | URL | Bounty eligible: No |
trust.hubspot.com | URL | Bounty eligible: No |
thespot.hubspot.com | URL | Bounty eligible: No |
ir.hubspot.com | URL | Bounty eligible: No |
events.hubspot.com | URL | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.