ATS and CRM for independent recruiters and small agencies
Primary sources checkedHarbor
Harbor is an ATS and client CRM built by working recruiters for independent recruiters and small agencies, with a browser extension that captures candidates and clients from LinkedIn and GitHub straight into a pipeline, and connected email and calendar for outreach and interview scheduling. There is a 30-day trial and no published price.
The short answer
- Best for
- A solo recruiter or two-to-five person agency currently running a spreadsheet, a mailbox and a browser full of LinkedIn tabs, who wants one place for candidates and clients
- Not ideal for
- Large multi-entity staffing firms needing enterprise governance, complex back office or global payroll, and buyers who require SOC 2 or ISO certification
- Price
- Not publicly priced; 30-day trial
- Closest alternative
- CrelateThe established agency ATS and CRM with published pricing and a long track record, when a proven system matters more than a product built by recruiters running the same desk.
At a glance
- Recruitment fitStrong
- Ease of useUnknown
- ImplementationStrong
- Price transparencyWeak
- Value for moneyUnknown
- ScalabilityUnknown
Why these assessments
- Recruitment fitStrong
- Candidate pipelines and client relationships in one surface, a sourcing extension for LinkedIn and GitHub with duplicate checks and pipeline assignment, and connected email and calendar for recruiter outreach and interview scheduling. Nothing here is a general CRM adapted to hiring.
- Ease of useUnknown
- SourcrLab has not used it. A product built by recruiters for their own workflow often is easier to live in, and that is a plausible expectation rather than an observation, so it is recorded as neither.
- ImplementationStrong
- A 30-day trial and a browser extension that starts producing records on the first profile you open. Email and calendar connect through Microsoft Graph or Google rather than needing a middleware project, so a solo recruiter can be working in it the same day.
- Price transparencyWeak
- No public numeric subscription pricing was established, and neither was the seat model, any minimum user count, onboarding or migration fees, or annual discounting. The 30-day trial is the only published commercial term.
- Value for moneyUnknown
- Not assessable. There is no published price at all, so there is nothing to weigh the capability against.
- ScalabilityUnknown
- The stated ICP is independent recruiters and small agencies, and with no published seat model, minimum users or enterprise tier there is no way to say what this looks like at twenty recruiters rather than two.
Our reading of the evidence on this page. No score, no formula.
Where it sits
- Discover
- Contact
- Outreach
- ATS
- Interview
The SourcrLab bottom line
An agency-operations product rather than an employer ATS that also serves agencies, and the difference shows in the client CRM sitting beside the candidate pipeline. Data handling is documented better than the price. The privacy policy names Work In Biotech LLC doing business as Harbor as operator and describes candidate and client data being processed on the customer's behalf, with the customer as controller. A Microsoft publisher attestation adds AWS and GCP hosting, US data storage for Microsoft-connected data, AES-256 at rest, retention under 30 days after account termination, annual penetration testing and quarterly vulnerability scanning — vendor self-attestation rather than an audit, and specific enough to be useful. The same attestation states Harbor does not currently claim SOC 2 or ISO 27001 certification, which is reproduced here exactly as written, because a vendor being clear about what it has not certified is worth more to a buyer than a softer sentence would be.
Best fit
The independent recruiter whose system of record is a spreadsheet and whose sourcing happens in a browser. Harbor closes exactly that loop: the extension captures a profile, resume and contact details from LinkedIn or GitHub with a duplicate check, assigns it to a pipeline, and the client side of the relationship lives in the same product. The founder built it after running Work In Biotech on a pile of separate tools, and the ICP fit shows in what is included rather than in the marketing.
Think twice if
You cannot budget for it from public information. No numeric subscription price was found, and neither was the seat model, a minimum user count, onboarding or migration fees, or any annual discount. The 30-day trial makes the product easy to try and does not make the cost knowable, so the price conversation has to happen before the trial ends rather than after.
SourcrLab assessment
Everything on this page comes from the vendor's own pages, checked on the dates below. SourcrLab has not used this product in real recruitment work, so you will not find a first-hand opinion here.
Why choose Harbor?
Built and operated by recruiters serving the same workflow
The founder built it after running a recruiting business on a set of separate tools, and refined it privately with recruiters and engineers before public release. That is not a quality guarantee, and it is a legible reason the feature set matches an agency desk rather than an HR department's.
Sourcing capture that ends inside the pipeline
The Chrome extension imports profiles, resumes and contact information from sources such as LinkedIn and GitHub, checks for duplicates, allows notes and tags, and assigns the candidate to a Harbor pipeline. For a recruiter who sources in a browser, that is the step that usually leaks into a spreadsheet.
Candidate pipeline and client CRM in one product
Agency work is two relationships, not one, and small firms usually keep the client half in a mailbox. Having both on one surface with connected email and calendar is the consolidation an independent recruiter actually needs, rather than more pipeline features.
More procurement disclosure than the size suggests
Hosting, data storage location, encryption at rest, a stated retention window after account termination, annual penetration testing and quarterly vulnerability scanning are all documented through the Microsoft publisher attestation. Most products at this stage publish a privacy policy and nothing else.
Main trade-offs
No published price at all
No numeric subscription pricing was established, and neither was the seat model, a minimum user count, onboarding or migration fees, or annual discounting. A 30-day trial lets you evaluate the product and tells you nothing about what it costs, so ask before the trial rather than after it.
SOC 2 and ISO 27001 are explicitly not claimed
The vendor's own Microsoft attestation states Harbor does not currently claim either certification. That is honest and it is also a hard stop for buyers whose procurement requires one, and no amount of documented practice substitutes for the attestation those processes ask for.
Microsoft-connected data is stored in the US
The publisher attestation states US data storage for Microsoft-connected data. For a European agency handling candidate personal data, that is a question for the DPA rather than a footnote, and no EU residency option was established.
Migration and integration coverage is unestablished
Google and Microsoft email and calendar are identified as key integrations and the extension covers LinkedIn and GitHub capture. Import coverage from legacy ATS products and the wider integration catalogue were not established, which matters most for the firm with five years of records to bring across.
Pricing and buying reality
Not publicly priced; 30-day trial
- The homepage offers a 30-day trial
- No public numeric subscription pricing was established in this research pass
- The seat model, any minimum user count, onboarding and migration fees and annual discounting were all unestablished
- No third-party price figure is imported here in place of a first-party one
What we do not know
- Subscription price and billing meter
- Seat model, minimum users and annual discounting
- Onboarding and migration fees
- Whether any EU data residency option exists
Checked August 2026. We do not list a price we have not verified ourselves.
How it fits your stack
Works with
- Google and Microsoft email and calendar, identified as key integrations
- LinkedIn and GitHub, through the Chrome sourcing extension
Likely replaces
- A spreadsheet used as a candidate and client database
- A separate scheduling link and manual outreach tracking in a mailbox
May overlap with
- Sourcing extensions and enrichment tools bought separately
Check before buying
- The price, seat model and any minimum, since none is published
- Whether US storage for Microsoft-connected data is acceptable under your DPA
- What can actually be imported from your current ATS
Harbor vs alternatives
Products a buyer would genuinely put next to this one, with the reason you would pick each instead.
Choose Crelate when you want an established agency ATS and CRM with published pricing and a long track record behind it.
Choose Recruitable when you want per-seat pricing you can read off a page, with placement, guarantee tracking and invoicing in the same agency system.
Consider Recruit CRM when a large independent review base and proven scale matter more than a product shaped by one recruiting business's own workflow.
Used Harbor?
Tell other recruiters what worked, what did not, and who it suits. Positive, mixed or critical — all useful.
Evidence
- ATS and CRM built by active recruiters for independent recruiters and small recruiting agencies — checked against a primary source: Harbor product site (ATS and CRM positioning, founder story, independent-recruiter and small-agency ICP, 30-day trial)
- The founder states the product was built after operating Work In Biotech on multiple separate tools and refined privately with recruiters and engineers before public release — vendor claim, not independently verified: Harbor product site (ATS and CRM positioning, founder story, independent-recruiter and small-agency ICP, 30-day trial)
- Chrome extension imports candidate and client profiles, resumes and contact information from sources such as LinkedIn and GitHub, with duplicate checks, notes and tags, and assignment into Harbor pipelines — checked against a primary source: Chrome extension listing (profile, resume and contact capture from LinkedIn and GitHub, duplicate checks, notes and tags, pipeline assignment)
- Communication workflows include connected email and calendar covering interview scheduling and recruiter outreach, using Microsoft Graph for Microsoft-connected accounts — vendor claim, not independently verified: Microsoft 365 app certification publisher attestation for Harbor, supplied by the vendor (Microsoft Graph email and calendar integration, AWS and GCP hosting, US data storage, AES-256 at rest, retention after termination, penetration testing and vulnerability scanning cadence, and an explicit statement that SOC 2 and ISO 27001 are not claimed) — vendor self-attestation, not an audit
- The homepage offers a 30-day trial; no public numeric subscription pricing was established — checked against a primary source: Harbor product site (ATS and CRM positioning, founder story, independent-recruiter and small-agency ICP, 30-day trial)
- Privacy policy states Work In Biotech LLC doing business as Harbor is the operator, and that candidate and client ATS and CRM data are processed on the customer's behalf with the customer acting as controller — checked against a primary source: Privacy policy (operator identity, platform and extension scope, controller and processor roles for candidate and client data)
- Microsoft publisher attestation states AWS and GCP hosting, US data storage for Microsoft-connected data, AES-256 at rest, retention under 30 days after account termination, annual penetration testing and quarterly vulnerability scanning — vendor claim, not independently verified: Microsoft 365 app certification publisher attestation for Harbor, supplied by the vendor (Microsoft Graph email and calendar integration, AWS and GCP hosting, US data storage, AES-256 at rest, retention after termination, penetration testing and vulnerability scanning cadence, and an explicit statement that SOC 2 and ISO 27001 are not claimed) — vendor self-attestation, not an audit
- The same attestation states Harbor does not currently claim SOC 2 or ISO 27001 certification — vendor claim, not independently verified: Microsoft 365 app certification publisher attestation for Harbor, supplied by the vendor (Microsoft Graph email and calendar integration, AWS and GCP hosting, US data storage, AES-256 at rest, retention after termination, penetration testing and vulnerability scanning cadence, and an explicit statement that SOC 2 and ISO 27001 are not claimed) — vendor self-attestation, not an audit
- Subscription pricing, seat model, migration coverage from legacy ATS products and the wider integration catalogue — not enough evidence
- SourcrLab has not used this product in real recruitment work. — not enough evidence
Last reviewed: August 2026. How SourcrLab verifies information
Work at Harbor?
Email us to verify this profile or suggest a factual update.