Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
IT Security NachrichtenOnePlus/OxygenOS: Schad-App erhält Root-Zugriff ohne Berechtigungen(24.09.2026 um 23:38 Uhr)
•
IT Security NachrichtenRyuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison(24.09.2026 um 22:50 Uhr)
•••••
Hacking & PentestingRyuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison(24.09.2026 um 22:50 Uhr)
•
AI & KI NachrichtenWhy the U.N. Still Matters(24.09.2026 um 23:00 Uhr)
•••
IT Security NachrichtenOnePlus/OxygenOS: Schad-App erhält Root-Zugriff ohne Berechtigungen(24.09.2026 um 23:38 Uhr)
•
IT Security NachrichtenRyuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison(24.09.2026 um 22:50 Uhr)
•••••
Hacking & PentestingRyuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison(24.09.2026 um 22:50 Uhr)
•
AI & KI NachrichtenWhy the U.N. Still Matters(24.09.2026 um 23:00 Uhr)
•••
Intelligence View
⚡ tsecurity.de Intelligence

Building Hubspot custom objects in Gadget

Extend HubSpot with custom objects powered by Gadget’s managed infrastructure, no Hubspot plan upgrade required! While working on internal automations in HubSpot, I hit a wall. At Gadget, we have a partner program, and we wanted to o…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Extend HubSpot with custom objects powered by Gadget’s managed infrastructure, no Hubspot plan upgrade required!




While working on internal automations in HubSpot, I hit a wall.



At Gadget, we have a partner program, and we wanted to optimize and automate this process as "we" - (Franco, Head of Partnerships) handled this process manually. As you can imagine, having to manage a massive spreadsheet of partners to ensure every referral is tracked and associated with a partner account is not the preferred way to start each and every morning.



I was tasked with finding a solution in HubSpot because tracking relationships between partners makes sense to do in a CRM (Customer ‘Relationship’ Management) tool.



But I hit a wall. I was unable to create more than 2 objects in Hubspot, and by default, HubSpot already contains 2 objects, Customers and Companies.



So I checked what plan we would need to get one more object, and the price increase was the definition of “sticker shock”.



My next thought was “why not build the Hubspot extension in Gadget?”, which then expanded to “This would be an amazing template for users to plug-and-play for internal apps.”



That's how we got here with the HubSpot Static Object template. The goal here is to:




  • Save you a hefty annual subscription

  • Build your own custom automations

  • And keep your data if you end your subscription for that extra custom object



Watch a full walkthrough on deploying the app template here:







This template is built from the internal issues we had at Gadget and refined for other HubSpot users facing steep price increases to unlock additional functionality. The app template uses Gadget to rapidly provision Postgres-backed data models, automatically generate CRUD APIs, and manage authentication and environment configuration out of the box.



On top of this foundation, Node is used as an orchestration layer to handle HubSpot-specific workflows such as JWT validation, conditional business logic, and coordinated read/write operations between HubSpot and the Gadget database, making it well suited for managing team-level data within a larger organization as a custom object.



For example, you may have 2 separate customers under the same domain or company and in HubSpot, that is not easy to distinguish, nor is it practical to make and manage a separate variant Company object of that Company account.



This template creates a custom object to manage groups within a company. Let's walk through it step by step!



The first step to a custom object is determining the fields and data required. This will be seen in the templates api/models/customObjectTeam model that contains the fields:





  • teamName - Name of the team


  • teamContacts - Array of HubSpot contact IDs


  • parentCompany - HubSpot company ID


  • portalId - HubSpot portal/account ID



These fields allow us to define a teamName and track associated contacts within the array.



When you create a model in Gadget it automatically creates the Postgres table and CRUD actions to handle Create, Update, and Delete, which are also included in the customObjectTeam model.



The template exposes this custom object to HubSpot through a small set of Node-based API routes that act as an orchestration layer between HubSpot and Gadget’s data models.



The primary routes are api/routes/hubspot/GET-teams.ts and api/routes/hubspot/POST-action.ts, which handle reading, creating, and updating team records stored in Gadget’s Postgres database. These routes are responsible for coordinating HubSpot requests, applying conditional business logic, and translating HubSpot-specific identifiers into the internal data model.



By handling this logic in Node, the template keeps complex workflow and integration behavior outside of HubSpot while still allowing HubSpot to act as the primary interface for users. All route access is secured using JWT-based authentication, which is enforced consistently across these endpoints.





The app card uses JWT auth to securely query the Gadget backend from Hubspot using HubSpot’s v3 authentication spec, which is handled in api/routes/hubspot/POST-auth.ts and keeps the connection secure.



Breaking down api/routes/hubspot/POST-auth.ts, it:




  • Extracts the Bearer token from the Authorization header

  • Verifies the JWT signature using GADGET_ENVIRONMENT_JWT_SIGNING_KEY

  • Checks that the session exists and hasn't expired (10-minute window)

  • Throws an error if any validation fails



By externalizing custom objects into Gadget, you regain control over your data model, your automations, and your long-term costs without giving up HubSpot as the system of record for relationships. If you’ve ever hit the same wall we did, this approach offers a practical, extensible way forward.

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Building Hubspot custom objects in Gadget
id: 80b331c7-3547-4ada-8466-908bfca52269
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Building Hubspot custom object" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Building Hubspot custom objects in Gadge")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Building Hubspot custom objects in Gadge*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Building Hubspot custom objects in Gadge"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Building Hubspot custom objects in Gadge.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Building Hubspot custom objects in Gadget

Thematisch verwandte Begriffe: Building, Hubspot, custom, objects · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-81473 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an …
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...
↗ Original-Quelle