Skip to content
Per-pair page

Connect TheHive to HubSpot in two minutes.

Real-time triggers from TheHive, ready-made actions in HubSpot. Filter, transform, and route without writing a line of code.

Trigger app
TheHive as the trigger

Workflows fire when something happens in TheHive.

Action app
HubSpot as the action

Workflows do something in HubSpot, instantly.

See all 23 actions →
Both directions

Pick the way that fits your stack.

Pair pages are mirrored. Each direction gets its own dedicated page.

TheHiveHubSpot

When something happens in TheHive, do it in HubSpot.

2 TheHive triggers wired to 23 HubSpot actions. Most-used pairing: Alert CreatedCreate Company.

HubSpotTheHive

Or fire it the other way around.

18 HubSpot triggers wired to 3 TheHive actions downstream.

See HubSpotTheHive
Popular pairings

Common TheHive → HubSpot workflows.

Pick a pairing to set it up in two minutes. Each one is a fully editable recipe.

Showing 8 of 46 combinations
When alert created in TheHive, create company in HubSpot.

Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.

When alert created in TheHive, create contact in HubSpot.

Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.

When alert created in TheHive, create deal in HubSpot.

Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.

When alert created in TheHive, create note in HubSpot.

Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.

When case created in TheHive, create company in HubSpot.

Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.

When case created in TheHive, create contact in HubSpot.

Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.

When case created in TheHive, create deal in HubSpot.

Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.

When case created in TheHive, create note in HubSpot.

Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.

How it works

Connect TheHive and HubSpot in five steps.

No code, no glue, no half-day setup. Each step is one click.

  1. 1
    Connect
    Authorize TheHive and HubSpot

    Open Tiny Command, authorize TheHive and HubSpot once each. Both connections are available to every workflow on your account.

  2. 2
    Trigger
    Pick a TheHive trigger

    Drop the TheHive → Alert Created trigger onto the canvas. Tiny Command auto-registers the webhook.

    POST /v1/webhooks/thehive.trigger-alert-created
  3. 3
    Transform
    Add a filter or AI step

    Optionally add a Filter node ("subject contains URGENT") or an AI step ("classify intent") between trigger and action.

  4. 4
    Action
    Add the HubSpot action

    Drop the HubSpot → Create Company action below it. Map fields from the TheHive payload into the HubSpot inputs.

    hubspot.create-company
  5. 5
    Publish
    Publish and forget

    Hit Publish. Tiny Command runs it in production from second one. Watch the run-log fill up.

FAQ

Questions about TheHive + HubSpot.

How long does it take to connect TheHive and HubSpot on Tiny Command?
Under two minutes. Authorize TheHive and HubSpot once each, drop the TheHive trigger and HubSpot action onto a workflow canvas, map a couple of fields, and publish. No code, no glue.
Is the TheHive ↔ HubSpot integration real-time?
Yes. Both TheHive and HubSpot expose webhooks, so events from one fire workflows in the other within seconds rather than on a polling interval.
Can I filter or transform data between TheHive and HubSpot?
Yes. Add a Filter node to only pass through matching events, a Switch node to branch by value, or an AI / Code node to transform payloads before they hit HubSpot.
What TheHive events can trigger a HubSpot workflow?
Any of the 2 TheHive triggers, including "Alert Created". Each fires in real time when the matching event happens in TheHive.
Do I need a paid plan to use TheHive with HubSpot?
No. There's a free tier that covers most TheHive+HubSpot use cases without a credit card. Paid plans unlock higher run volumes and team features when you outgrow it.
What if I want HubSpot → TheHive instead?
Build it the same way, in reverse. There's a dedicated /integrations/hubspot/with/thehive page with the reverse-direction triggers and actions.
Related

Other apps that pair well with TheHive.


Wire TheHive to HubSpot in 2 minutes.

Free tier available. No credit card. No onboarding call.