CMS
HubSpot CMS audit: tracking tax vs a site a crawler can quote
· Configuration notes, not a newsroom.
HubSpot fingerprints from hs-scripts.com and hs-banner. SiteRune scores the public page. Chat widgets and three HubSpot JS files are the usual third-party finding.
COS is hosted. Headers are limited.
HubSpot CMS will not give you nginx. Missing security headers go to a CDN in front, or HubSpot's own header settings where they exist. We will not invent a COS feature that is not there.
Marketing JS vs citable HTML
Popups, CTA loaders, and the tracking code on every URL show up in the third-party ledger. Organization schema, llms.txt, and robots that allow AI crawlers are still your job. A landing page that is a form and a background video is seo-thin even if HubSpot says the score is 'healthy'.
Run it on a live URL
The brief will name your CMS and attach the files. Three guest scans, no card.