@B M E I haven't but just having a quick look at the documentation it looks like the authentication flow works the opposite way. That is your endpoint is supposed to validate the request signature from hubspot. So I would say a public (available without login) suitelet in NetSuite that doesn't respond with any data unless the signature from hubspot is validated.