Thank you for the information, i will take a look. The more we find out the more I think we should just host the site ourselves as we have little control around the security. I told hubspot this company in china was scraping our website (every single page) at the same time every day, we then get a notificaion for every single page they visit (that is a lot of emails) the option is to turn off the email notification which is a global setting. I would have liked Hubspot to offer GEO blocking, or url blocking at least. They offer IP based, but this company would have millions of IPs as it is a Chinese telecom company and it is most likely a hacker using them as an ISP.