Pricing
Priced per portal, not per seat
Governance should not get more expensive every time someone joins the team. You pay for the portals we watch, not the people who watch them.
Single portal
For one HubSpot portal that needs continuous permission oversight.
£35 per month
or £350 per year
Excluding VAT. UK customers are charged VAT at checkout.
- One connected portal
- Up to 50,000 portal contacts
- Unlimited HubSpot users
- Nightly scans in the overnight window
- Baseline import and drift detection
- Security alerts and audit trail
- Anomaly detection and two-factor sign-in
- Property hygiene and person profiles
- ISO 27001 and SOC 2 audit tooling
- Up to five console users
Estate
For organisations running several portals across teams, brands or clients. Minimum of two portals.
£45 per month per portal
or £450 per year per portal
Excluding VAT. UK customers are charged VAT at checkout.
- Everything in Single portal +
- From two to twenty connected portals
- Up to 250,000 portal contacts
- Add portals at any time, charged pro rata
- Hourly scans with refresh on demand
- Contact-level team exposure alerts
- Anomaly detection and two-factor sign-in
- Provisioning and offboarding with record reassignment
- Portal-scoped roles for managers
- Up to 10 console users
Enterprise
For regulated estates with bespoke review, retention or residency requirements.
Talk to us
- Everything in Estate +
- Unlimited portals
- Continuous scanning
- Extended audit retention
- Access review exports
- Anomaly detection and two-factor sign-in
- MCP server for AI assistants
- SSO sign-in (in build)
- Unlimited console users
- Named implementation contact
Questions
Common questions about pricing
Does the price change as we add users?
No. Pricing follows the number of connected HubSpot portals, so adding reviewers or managers costs nothing extra.
Can we pay annually?
Yes. Annual billing is available on both self-serve plans at roughly two months free, and you can switch between monthly and annual at the end of any paid period from the billing screen.
What happens if we disconnect a portal?
Collection stops immediately and the stored credential is deleted. Historical audit entries are retained for your records.
Do you need write access to HubSpot?
Scanning uses read scopes only. Provisioning and offboarding write to HubSpot, so those use write scopes you opt into separately.
How often do scans actually run?
Single portal is scanned nightly in the overnight window. Estate runs hourly and adds refresh on demand. Enterprise scans continuously. The cadence is enforced per plan, not advisory.
What if HubSpot blocks some of the data?
Some feeds, such as the full audit log, are only available on higher HubSpot subscriptions. Where a portal's subscription refuses a feed, FlowSentinel records the reason and shows it on the portal, rather than failing quietly.