Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
gws-uat.files.comtestNot in the scope2026-11-14
hachette.files.comNot in the scope2026-11-14
hammonsprodlab.files.comNot in the scope2026-11-14
webmail.handyworldwb.files.commailNot in the scope2026-11-14
harborbusiness.files.comNot in the scope2026-11-14
harding-poorman.files.comNot in the scope2026-11-14
hashtaginfluencer.files.comNot in the scope2026-11-14
havi.files.comNot in the scope2026-11-14
hazardscout.files.comNot in the scope2026-11-14
hbk.files.comNot in the scope2026-11-14
hcontinentalevian.files.comNot in the scope2026-11-14
hcpsocal.files.comNot in the scope2026-11-14
healindonesia.files.comNot in the scope2026-11-14
health.files.comNot in the scope2026-11-14
healthcarehorizons.files.comNot in the scope2026-11-14
healthgrades.files.comNot in the scope2026-11-14
healthpayerconsortium.files.comNot in the scope2026-11-14
healthresources.files.comNot in the scope2026-11-14
hearstautos.files.comNot in the scope2026-11-14
heinsohnsftp.files.comNot in the scope2026-11-14
heitmann.files.comNot in the scope2026-11-14
hendersonstamping.files.comNot in the scope2026-11-14
henrylibersat.files.comNot in the scope2026-11-14
hershey.files.comNot in the scope2026-11-14
hgo.files.comNot in the scope2026-11-14
hier.files.comNot in the scope2026-11-14
highered.files.comNot in the scope2026-11-14
highridge.files.comNot in the scope2026-11-14
hightower.files.comNot in the scope2026-11-14
hightower-dev.files.comdevNot in the scope2026-11-14
hightowers.files.comNot in the scope2026-11-14
hiinfo.files.comNot in the scope2026-11-14
hilex.files.comNot in the scope2026-11-14
hillcountry.files.comNot in the scope2026-11-14
hipinvestor.files.comNot in the scope2026-11-14
hippocratic.files.comNot in the scope2026-11-14
hiretech-npe-us.files.comNot in the scope2026-11-14
hiretech-prd-us.files.comNot in the scope2026-11-14
hiretech-uat-us.files.comtestNot in the scope2026-11-14
hiretech1-prd-us.files.comNot in the scope2026-11-14
hiretech1-uat-us.files.comtestNot in the scope2026-11-14
histowiz.files.comNot in the scope2026-11-14
hivery.files.comNot in the scope2026-11-14
hklaw.files.comNot in the scope2026-11-14
hlh.files.comNot in the scope2026-11-14
hm.files.comNot in the scope2026-11-14
hobbstheprinters.files.comNot in the scope2026-11-14
home.files.comNot in the scope2026-11-14
homeloan.files.comNot in the scope2026-11-14
homepartners.files.comNot in the scope2026-11-14
homes.files.comNot in the scope2026-11-14
homesome.files.comNot in the scope2026-11-14
honey.files.comNot in the scope2026-11-14
hoplun.files.comNot in the scope2026-11-14
horizonbank.files.comNot in the scope2026-11-14
horizonpharma.files.comNot in the scope2026-11-14
hortijardines.files.comNot in the scope2026-11-14
hospitality.files.comNot in the scope2026-11-14
host.files.comNot in the scope2026-11-14
hostmaster.files.comNot in the scope2026-11-14
hotnc.files.comNot in the scope2026-11-14
househappy.files.comNot in the scope2026-11-14
houseoftroy.files.comNot in the scope2026-11-14
hq.files.comNot in the scope2026-11-14
hta.files.comNot in the scope2026-11-14
htb.files.comNot in the scope2026-11-14
htsc.files.comNot in the scope2026-11-14
httpbin.files.comNot in the scope2026-11-14
hub.files.comNot in the scope2026-11-14
humphreyftp.files.comNot in the scope2026-11-14
hunterwatts.files.comNot in the scope2026-11-14
huntingdoncollege.files.comNot in the scope2026-11-14
hydrian.files.comNot in the scope2026-11-14
hyperativa.files.comNot in the scope2026-11-14
iacdrive.files.comNot in the scope2026-11-14
iam.files.comauthNot in the scope2026-11-14
ic-files.files.comdataNot in the scope2026-11-14
ici.files.comNot in the scope2026-11-14
icloudinserver.files.comNot in the scope2026-11-14
icolor.files.comNot in the scope2026-11-14
events.from.ics.files.comNot in the scope2026-11-14
idealconcepts.files.comNot in the scope2026-11-14
idealista.files.comNot in the scope2026-11-14
idleit.files.comNot in the scope2026-11-14
ies.files.comNot in the scope2026-11-14
ieso.files.comNot in the scope2026-11-14
ifg.files.comNot in the scope2026-11-14
igt.files.comNot in the scope2026-11-14
igtigtsolutions.files.comNot in the scope2026-11-14
igtsolutions.files.comNot in the scope2026-11-14
ihsi.files.comNot in the scope2026-11-14
iicc.files.comNot in the scope2026-11-14
ikonopedia.files.comNot in the scope2026-11-14
iks-sftp.files.comdataNot in the scope2026-11-14
imagenet.files.comNot in the scope2026-11-14
images.files.comNot in the scope2026-11-14
imagestop.files.comNot in the scope2026-11-14
imap.files.commailNot in the scope2026-11-14
imark.files.comNot in the scope2026-11-14
imc.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.