Works with what you already run

Connect your HubSpot portal with OAuth. Import companies with a domain into Grow from the Find tab (archived prospects unarchive instead of duplicating). When a Grow prospect is marked Won, we create or update a company (domain, name, Client Posture grade, verified issue count, last scan) and a deal from the accepted quote. Unknown findings are never sent as issues.

Map each client to a HaloPSA client. We open one ticket per verified fail or warning, skip Unknown and Not tested, and close the ticket with a note when a later scan verifies a pass.

HTTPS endpoints for scan, grade, Security Brief, proposal, pipeline, and new-client events. HMAC-SHA256 signatures, no contact PII. How to verify webhooks →

Per-person API keys with read / prospects:write / scans:write scopes. Subscribe to REST hooks, poll sample events, create a prospect, or start a scan. No sends, accepts, or deletes.

Connect Claude, ChatGPT, Cursor, or VS Code with a per-person API key. Read scans, findings, and prospects; start scans and draft quotes. No sends, accepts, or deletes. Read the MCP docs →

From any scanned domain, export check-level findings as CSV for tickets, SOWs, or spreadsheets — no PSA required.

Paste a CSV of client domains on the Clients page. Respects your plan domain limit. Useful when migrating from a spreadsheet.

Download a branded PDF or share /r/[id] with prospects. Logo and colors come from Branding settings.

Pro quotes export an accepted proposal PDF and a CSV of line items. After the client accepts, we show your payment link — we do not process that payment.

Send a no-login link for the insurance readiness questionnaire. Answers are labeled Verified by scan, Confirmed by IT provider, or Confirmed by client. No PSA required.