What is live, and what comes next

1. LiveShipped

   One-click connection from HubSpot

   Install FlowSentinel in a HubSpot portal and approve the permissions in HubSpot itself, with no keys to create or paste. Access is refreshed automatically, and removing the app in HubSpot immediately ends FlowSentinel's access.

2. LiveShipped

   Portal connection and continuous scanning

   Connect every HubSpot portal with encrypted credentials, then collect users, roles, teams and permission sets on a schedule, with manual re-runs that cannot overlap.

3. LiveShipped

   Baseline import and drift detection

   Import an approved permission baseline and compare live access against it, with super admin exemptions and a record of every difference found.

4. LiveShipped

   Team exposure alerts

   Raise an alert when a person belongs to more than one team, or when contacts are reachable by several teams at once.

5. LiveShipped

   Audit trail and AI assistant access

   Every action recorded with portal, actor and change detail, plus a read-only connection so an AI assistant can answer questions about your estate.

6. LiveShipped

   Access review exports

   Download the audit trail, the current user and permission picture, or the drift ledger as a spreadsheet, filtered exactly as you see it on screen. The export itself is recorded.

7. LiveShipped

   Dormant accounts with privileged access

   Flag accounts that have not been active for sixty days but still hold super admin rights or the ability to export data.

8. LiveShipped

   Offboarding a leaver

   Find a person across every connected portal, remove their access in one action with a confirmation step, and verify each removal before recording it.

9. LiveShipped

   Adding a person to several portals at once

   Create someone once, pick the portals they belong to, and let an approved role template set the right role and teams in each one.

10. LiveShipped

    Reassigning records during offboarding

    Hand a leaver's contacts, companies, deals and tickets to a nominated successor as part of the same action, or confirm the records are left unassigned.

11. LiveShipped

    Property hygiene

    Measure how often every property is filled in, across every object type, with search, filters, sorting and full property detail for each field.

12. LiveShipped

    Person profiles

    One page per person showing their access in each portal, the records they own or can reach, their recent activity and the alerts raised about them.

13. LiveShipped

    Portal health at a glance

    Expand any connected portal to see the last sync, the status of each data feed, any limits imposed by its HubSpot subscription, and the user and alert counts.

14. LiveShipped

    Scan schedules and limits by plan

    Scan frequency now follows the plan: nightly on Single portal, hourly with refresh on demand on Estate, and continuous on Enterprise. Portal and console seat limits are enforced too.

15. LiveShipped

    Permission set detail view

    Show the hub and tool level detail behind each permission set, so a reviewer can see exactly what a role can reach.

16. LiveShipped

    Admin behaviour anomaly detection

    Detect bursts of privileged changes, out-of-hours admin activity and security events from accounts outside the current portal user list.

17. LiveShipped

    Two-factor sign-in

    Protect FlowSentinel access with SMS verification, single-use recovery codes and an organisation policy for privileged roles on every plan.

18. LiveShipped

    Access recertification and compliance evidence

    Quarterly access reviews with a named reviewer's sign-off and an exportable evidence pack, making SOC 2 and ISO 27001 audits easier to prepare for.

19. NextLater this year

    Sign-in through your own identity provider

    SAML sign-in for enterprise estates, mapped by email domain, keeping invite-only provisioning as the gate.

Priorities here move when customers tell us what a review actually needs. Book a walkthrough and bring the gap with you.