How This Briefing Works
This report opens with key findings, then maps the gaps between what Hushly discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Disclosure Gaps
Claims vs. Observed Behavior
3 gaps
pending
HIGH
They Claim
“1st-Party opt-in database”
Observed Behavior
Awaiting scanner verification to determine how this enrichment database interacts with customer-deployed scripts at runtime and what data is transmitted to Hushly servers during visitor sessions
pending
HIGH
They Claim
“GDPR compliant as data controller”
Observed Behavior
Runtime observation needed to confirm whether behavioral tracking and enrichment lookups occur before or after consent capture on customer properties
pending
MEDIUM
They Claim
“AI-powered lead qualification”
Observed Behavior
Scope of automated profiling and decision-making about visitors needs direct observation to characterize under GDPR Article 22 automated decision-making requirements
Customer Impact
What This Means For You
Organizations using Hushly should understand that the platform's lead capture model extends well beyond the visible form fields visitors complete. The AI-driven enrichment process builds comprehensive profiles using behavioral signals, traffic source data, and Hushly's centralized database — all from what the visitor perceives as simply reading content. For organizations in regulated industries, this invisible profiling layer creates compliance exposure under GDPR's transparency requirements and CCPA's right-to-know provisions. The centralized enrichment database also means your visitor data is being processed through a shared system that aggregates intelligence across Hushly's customer base, raising data isolation and sovereignty concerns.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for Hushly
- →- Audit enrichment scope: Request from Hushly a complete inventory of what data points are captured and enriched beyond the visible form fields visitors submit. - Review data controller relationship: Clarify the legal basis under which Hushly processes your visitor data through its centralized enrichment database as a data controller (not processor). - Map export destinations: Document exactly what enriched data is exported to your CRM and marketing automation platforms, and verify this matches what your privacy policy discloses. - Assess consent coverage: Verify that your consent management platform captures explicit consent for the behavioral tracking and enrichment activities Hushly performs, not just for the visible form submission. - Evaluate data isolation: Confirm whether your visitor data is segregated within Hushly's enrichment database or commingled with data from other customers.
Negotiation Leverage
- →Hushly's data controller status over its enrichment database is the key leverage point in negotiations. As a data controller, Hushly has independent decision-making authority over how it processes your visitor data — push for contractual limitations on this authority, including restrictions on using your visitor data to enrich other customers' records. Demand data isolation guarantees and audit rights over the enrichment database. Request explicit documentation of the legal basis Hushly relies on for each data processing activity (behavioral tracking, enrichment lookups, profile building, data export). If operating under GDPR, clarify the controller-to-controller data sharing arrangement and ensure appropriate safeguards are contractually binding.
IOC Manifest
IOC Manifest
206 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*www.hushly.com/wp-includes/js/jquery/jquery.js*
Tracking script
TRACK
*www.hushly.com/wp-includes/js/jquery/jquery-migrate.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/npm/swiper@11/swiper-bundle.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/embeds.js*
Tracking script
TRACK
*tag.hushly.com/webx-runtime-*-fb86-11ec-*-*.js*
Tracking script
TRACK
*hubfront.hushly.com/embed.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/wp-content/uploads/essential-addons-elementor/eael-*.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/frontend-modules.js*
Tracking script
TRACK
*www.hushly.com/wp-includes/js/jquery/ui/core.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/frontend.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/wp-content/plugins/megamenu/js/maxmegamenu.js*
Tracking script
TRACK
*www.hushly.com/wp-includes/js/hoverIntent.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/wp-content/themes/hello-elementor/assets/js/hello-frontend.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/wp-content/themes/hello-elementor-child/assets/js/custom.js*
Tracking script
TRACK
*www.hushly.com/wp-includes/js/dist/hooks.js*
Tracking script
TRACK
*www.hushly.com/wp-content/cache/min/1/wp-content/plugins/header-footer-elementor/inc/js/frontend.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js*
Tracking script
TRACK
*www.hushly.com/wp-content/themes/hello-elementor-child/assets/js/bootstrap.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor-pro/assets/js/frontend.js*
Tracking script
TRACK
*www.hushly.com/wp-includes/js/dist/i18n.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.*.bundle.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/text-editor.*.bundle.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/nested-tabs.*.bundle.js*
Tracking script
TRACK
*app.hushly.com/runtime/widget.js*
Tracking script
TRACK
*www.hushly.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.*.bundle.js*
Tracking script
TRACK
*tag.hushly.com/exp/widget-*.js*
Tracking script
TRACK
*embed-ui.hushly.com/embed.js*
Tracking script
TRACK
*embed-ui.hushly.com/common.js*
Tracking script
TRACK
*embed-ui.hushly.com/embedForm.js*
Tracking script
TRACK
*embed-ui.hushly.com/embedStream.js*
Tracking script
TRACK
*embed-ui.hushly.com/contentSherpa.js*
Tracking script
TRACK
*app.hushly.com/runtime/visitor/1*
Tracking script
TRACK
www.hushly.com/wp-includes/js/jquery/jquery.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-includes/js/jquery/jquery-migrate.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/npm/swiper@11/swiper-bundle.min.js
Auto-extracted from scan
TRACK
tag.hushly.com/webx-runtime-ee323fdc-fb86-11ec-8859-067373548d75.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/embeds.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/wp-content/uploads/essential-addons-elementor/eael-134856.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-includes/js/jquery/ui/core.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/themes/hello-elementor-child/assets/js/bootstrap.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/wp-content/themes/hello-elementor-child/assets/js/custom.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/wp-content/themes/hello-elementor/assets/js/hello-frontend.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-includes/js/hoverIntent.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/wp-content/plugins/megamenu/js/maxmegamenu.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/cache/min/1/wp-content/plugins/header-footer-elementor/inc/js/frontend.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-includes/js/dist/hooks.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-includes/js/dist/i18n.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js
Auto-extracted from scan
TRACK
hubfront.hushly.com/embed.js
Auto-extracted from scan
TRACK
app.hushly.com/runtime/widget.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/nested-tabs.a542ad943214eb6c3ed8.bundle.min.js
Auto-extracted from scan
TRACK
www.hushly.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.fc9d01c2cd0ef46d20fd.bundle.min.js
Auto-extracted from scan
TRACK
tag.hushly.com/exp/widget-c0c6c2bfeebdd1a688cd0d5861d1a382.js
Auto-extracted from scan
TRACK
embed-ui.hushly.com/embed.js
Auto-extracted from scan
TRACK
embed-ui.hushly.com/common.js
Auto-extracted from scan
TRACK
embed-ui.hushly.com/contentSherpa.js
Auto-extracted from scan
TRACK
embed-ui.hushly.com/embedForm.js
Auto-extracted from scan
TRACK
embed-ui.hushly.com/embedStream.js
Auto-extracted from scan
TRACK
app.hushly.com/runtime/visitor/1
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
Hushly integrates with major CRM and marketing automation platforms including Salesforce, HubSpot, Marketo, Pardot, and Eloqua for lead export and nurture workflows. The platform connects to content management systems for dynamic content delivery and supports integration with ABM platforms for account-level targeting. Hushly's centralized enrichment database acts as a data hub — visitor interactions captured on customer properties are enriched through this shared database before being exported to downstream systems, creating a data flow where Hushly sits between your website visitors and your marketing/sales infrastructure.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
206 detection signatures across scripts, domains, cookies, and network endpoints