Skip to content

Close CRM

Service Name: Close CRM

Service Description: Close CRM is a sales engagement platform designed for startups and SMBs that combines CRM, email, calling, and sales automation features to help sales teams manage their pipeline and close more deals.

Service Address: https://www.close.com/

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants full access to the Close CRM API, allowing management of contacts, leads, opportunities, tasks, and other CRM data.

Secret Revokement URL: https://app.close.com/settings/api/

Secret Example: api_5Tz9YdiZepRxmGgUgEaKqweQUBTEeMRQs0V5LjPQWd

Suspicious Activity Investigation Instructions:

  • Check the Close CRM activity logs for unauthorized API calls or data access.
  • Review recent changes to contacts, leads, or opportunities that may have been made through the API.
  • Monitor for unusual data exports or mass updates to CRM records.
  • Check for new integrations or webhooks that may have been set up using the API key.

Mitigation Instructions:

  • Sign in to your Close CRM account.
  • Go to Settings > API Keys.
  • Identify the compromised API key.
  • Select the delete or revoke option next to the key.
  • Create a new API key if needed.
  • Update any legitimate applications using the old key with the new key.
  • Review and update security practices to prevent future exposure.