Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through responseAnalysed#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
julieninc.files.comNot in the scope2026-11-14
jumptrading.files.comNot in the scope2026-11-14
jusbach.files.comNot in the scope2026-11-14
justappraised.files.comNot in the scope2026-11-14
justin.files.comNot in the scope2026-11-14
justins.files.comNot in the scope2026-11-14
justintest.files.comNot in the scope2026-11-14
justintest2.files.comNot in the scope2026-11-14
justman.files.comNot in the scope2026-11-14
jvion.files.comNot in the scope2026-11-14
jwfinancialcoaching.files.comNot in the scope2026-11-14
k3.files.comNot in the scope2026-11-14
k3s.files.comNot in the scope2026-11-14
k8s.files.comtoolsNot in the scope2026-11-14
kahlerslater.files.comNot in the scope2026-11-14
kaiulanikimbrell.files.comNot in the scope2026-11-14
kalmes.files.comNot in the scope2026-11-14
kalmestest.files.comNot in the scope2026-11-14
kamauj.files.comNot in the scope2026-11-14
kamstrup.files.comNot in the scope2026-11-14
kamstrupreadytest.files.comNot in the scope2026-11-14
kappa.files.comNot in the scope2026-11-14
kashoo.files.comNot in the scope2026-11-14
www.files.co.kaskus.files.comdataNot in the scope2026-11-14
kaye.files.comNot in the scope2026-11-14
kazoo-dev.files.comdevNot in the scope2026-11-14
kbra.files.comNot in the scope2026-11-14
kc9wwh.files.comNot in the scope2026-11-14
kcurallc.files.comNot in the scope2026-11-14
kd.files.comNot in the scope2026-11-14
kearnybank.files.comNot in the scope2026-11-14
keloneil.files.comNot in the scope2026-11-14
kentoutdoors.files.comNot in the scope2026-11-14
keplergroup.files.comNot in the scope2026-11-14
kewka.files.comNot in the scope2026-11-14
kfc.files.comNot in the scope2026-11-14
kickup.files.comNot in the scope2026-11-14
kitco.files.comNot in the scope2026-11-14
klutch.files.comNot in the scope2026-11-14
knowledgemanagement.files.comNot in the scope2026-11-14
ko-mar.files.comNot in the scope2026-11-14
koel.files.comNot in the scope2026-11-14
kolivo.files.comNot in the scope2026-11-14
kolonial.files.comNot in the scope2026-11-14
komax.files.comNot in the scope2026-11-14
komoriamerica.files.comNot in the scope2026-11-14
komsystems.files.comNot in the scope2026-11-14
kphageman.files.comNot in the scope2026-11-14
kristalytics.files.comNot in the scope2026-11-14
kristinconard.files.comNot in the scope2026-11-14
krystal.files.comNot in the scope2026-11-14
krystal2.files.comNot in the scope2026-11-14
ks-inventory-api.files.comapiNot in the scope2026-11-14
ks-invoice-api.files.comapiNot in the scope2026-11-14
ks-limits-api.files.comapiNot in the scope2026-11-14
ks-order-api.files.comapiNot in the scope2026-11-14
ks-program-api.files.comapiNot in the scope2026-11-14
ks-vendingtransactions-mq0.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq1.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq2.files.comNot in the scope2026-11-14
ksschool.files.comNot in the scope2026-11-14
kubernetes.files.comtoolsNot in the scope2026-11-14
kurttesting.files.comNot in the scope2026-11-14
kurvv.files.comNot in the scope2026-11-14
kutest.files.comNot in the scope2026-11-14
kv-urgent-care.files.comNot in the scope2026-11-14
kvtech.files.comNot in the scope2026-11-14
kyndryl.files.comNot in the scope2026-11-14
kyndryltest.files.comNot in the scope2026-11-14
kynetec.files.comNot in the scope2026-11-14
laborlawyers.files.comNot in the scope2026-11-14
lakecitybank.files.comNot in the scope2026-11-14
lancet.files.comNot in the scope2026-11-14
landis.files.comNot in the scope2026-11-14
languageweaver.files.comNot in the scope2026-11-14
www.lara.files.comNot in the scope2026-11-14
laru.files.comNot in the scope2026-11-14
larueinsitu.files.comNot in the scope2026-11-14
laurenpipkorndesign.files.comNot in the scope2026-11-14
lays.files.comNot in the scope2026-11-14
lbm.files.comNot in the scope2026-11-14
lcs.files.comNot in the scope2026-11-14
leadhoop.files.comNot in the scope2026-11-14
leadingre.files.comNot in the scope2026-11-14
leaphealth.files.comNot in the scope2026-11-14
leapinggeezer.files.comNot in the scope2026-11-14
learningcare.files.comNot in the scope2026-11-14
leatheroxide.files.comNot in the scope2026-11-14
www.lebanono.files.comNot in the scope2026-11-14
leoniemac.files.comNot in the scope2026-11-14
lessonly.files.comNot in the scope2026-11-14
levanta.files.comNot in the scope2026-11-14
level11analytics.files.comNot in the scope2026-11-14
lha.files.comNot in the scope2026-11-14
lhoste.files.comNot in the scope2026-11-14
libertybank.files.comNot in the scope2026-11-14
lifesouth.files.comNot in the scope2026-11-14
lifespark.files.comNot in the scope2026-11-14
lift.files.comNot in the scope2026-11-14
liftforward.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.