Email Security Index / Work software
Can hubspot.com be impersonated by email?
No: forged email “from” hubspot.com is refused.
hubspot.com tells receiving mail servers to reject any message that fails its authentication (DMARC p=reject). A forged email claiming to be from hubspot.com is refused by Gmail, Outlook, Yahoo and every other receiver that follows DMARC.
- Grade
- C 64/100
- Rank
- 44 of 48
- In work software
- 7 of 8
- DMARC
- reject
Measured 2026-11-07. Full live report card · Signed proof
Beyond impersonation
- OffMTA-STS Makes mail sent to the domain travel encrypted, so delivery can’t be silently downgraded to plain text.
- OnDNSSEC Signs the domain’s DNS answers, so the records above can’t be forged in transit.
- OnBIMI logo Shows the brand’s verified logo next to its messages in supporting inboxes.
Work software
The daily score is recorded from the next measurement.
No confirmed change yet. A change is listed once two checks six hours apart agree.
About this page
Measured from public DNS with the same checks anyone can run on their own domain, as part of the Email Security Index of 48 well-known brands. It describes what public DNS shows about email impersonation and delivery, not hubspot.com’s security overall. Spotted something wrong? Tell us and it’s re-checked.