Vet every new HubSpot company before anyone works the record

Whenever a new company is created in HubSpot, research that company's web presence and attach a plain-language profile to the record before a sales rep or a security reviewer ever touches it. Use a webhook trigger that fires on HubSpot company creation.

Start with HubSpot Get Company to read the company name and the website domain from the newly created record. If the company has no domain filled in, skip the research entirely, post nothing to Slack, and leave a short note on the record saying the profile was skipped because no website was set. Never guess a domain from the company name.

When there is a domain, run these SecurityTrails lookups against it. Use Get WHOIS to establish how long the business has been registered, who the registrar is, and which country the registrant sits in. Use Get Domain for the current DNS records, including which email provider the MX records point at and who hosts the site. Use List Subdomains to gauge how large their web footprint is. Use Get Domain SSL Certificates to see whether the site is properly certified and which brands appear on their certificates.

Turn the findings into a short written brief. Cover company maturity based on how long the domain has been registered, rough technical size based on how many subdomains exist, and the email and hosting stack in named terms such as Google Workspace, Microsoft 365, Cloudflare or AWS.

Call out anything that looks off, explicitly and in one place: a domain registered only weeks ago, no valid certificate, a footprint of one single page, a registrant country that does not match where the company claims to operate, or certificates issued to brand names unrelated to this company. If nothing looks unusual, say so plainly rather than manufacturing concerns.

Write the full brief onto the company record using HubSpot Create Note, associated with that company. Then post a two line version to a Slack channel using Send a Message so the record owner sees it in context. The first line names the company and the headline judgement, the second carries the single most useful detail or the main warning sign. Include a link back to the HubSpot record.

Keep the writing non-technical throughout. The readers are sales reps and security reviewers, not engineers, so write that their email runs on Google Workspace rather than naming record types. Never invent data the lookups did not return. If a lookup comes back empty or fails, say that the information was not available and continue with the rest of the brief.