Hey I have a Question 
, is there any additional way to authenticate the hubspot user who is using the integration?. So basically only way now is use the signature (hmac). In hypothesis, if the secret got comprised(either via dev or hubspot). That’s it, anyone can authenticate right. Does hubspot provide or planning additional security measures?
Hey @ramkumar1021,
Welcome to the Community!
As of now, I believe the best approach if you belive your client secret is compromised, is to treat it as compromised and rotate it, and to keep that value secret. For roadmap/feature requests, the Developer Feedback form might be the best place!
That said, I’d like to tag in some of our Top Contributors to see if they have any additional suggestions here!
Hey @evaldas, @Anton, @GRajput -- Do you have any suggestions for @ramkumar1021 on this?
Thanks in advance!
Best,
Sam, Community Manager