Bug bounty program
FC
Files.com
Most upvoted reports3
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001 | No weakness recorded | 2017-04-16 | $600 | 29 |
| Existence of Folder path by guessing the path through responseAnalysed#174645 | Information Disclosure | 2017-05-02 | – | 15 |
| CSRF @ configuration#208734 | Cross-Site Request Forgery | 2017-05-27 | – | 8 |
Subdomains3,165
| Name | Scope | First seen |
|---|---|---|
| nesto.files.com | Not in the scope | 2026-11-14 |
| net60.files.com | Not in the scope | 2026-11-14 |
| netbrain.files.com | Not in the scope | 2026-11-14 |
| netbraintechnologies.files.com | Not in the scope | 2026-11-14 |
| netpro.files.com | Not in the scope | 2026-11-14 |
| new.files.com | Not in the scope | 2026-11-14 |
| news.files.com | Not in the scope | 2026-11-14 |
| newtonimpact.files.com | Not in the scope | 2026-11-14 |
| newwestcityprod.files.com | Not in the scope | 2026-11-14 |
| newwestcitytest.files.com | Not in the scope | 2026-11-14 |
| nexant.files.com | Not in the scope | 2026-11-14 |
| nexla.files.com | Not in the scope | 2026-11-14 |
| nextracker.files.com | Not in the scope | 2026-11-14 |
| nginx.files.com | Not in the scope | 2026-11-14 |
| nginx-newest.files.com | Not in the scope | 2026-11-14 |
| nginx-newest1.files.com | Not in the scope | 2026-11-14 |
| ngx.files.com | Not in the scope | 2026-11-14 |
| nhg.files.com | Not in the scope | 2026-11-14 |
| ninjatrader.files.com | Not in the scope | 2026-11-14 |
| nitaherlestiany.files.com | Not in the scope | 2026-11-14 |
| niyantras.files.com | Not in the scope | 2026-11-14 |
| njoy.files.com | Not in the scope | 2026-11-14 |
| nlyte.files.com | Not in the scope | 2026-11-14 |
| nni.files.com | Not in the scope | 2026-11-14 |
| nodejs.files.com | Not in the scope | 2026-11-14 |
| nodejs-dev.files.comdev | Not in the scope | 2026-11-14 |
| nogin.files.com | Not in the scope | 2026-11-14 |
| non-prod.files.com | Not in the scope | 2026-11-14 |
| noname59.files.com | Not in the scope | 2026-11-14 |
| noneed2.files.com | Not in the scope | 2026-11-14 |
| norlock.files.com | Not in the scope | 2026-11-14 |
| northbaycu.files.com | Not in the scope | 2026-11-14 |
| northdata.files.com | Not in the scope | 2026-11-14 |
| northerlies.files.com | Not in the scope | 2026-11-14 |
| northfield.files.com | Not in the scope | 2026-11-14 |
| northstar.files.com | Not in the scope | 2026-11-14 |
| northwind.files.com | Not in the scope | 2026-11-14 |
| nortonrosefulbright.files.com | Not in the scope | 2026-11-14 |
| notora.files.com | Not in the scope | 2026-11-14 |
| noveocare.files.com | Not in the scope | 2026-11-14 |
| novusfiles.files.com | Not in the scope | 2026-11-14 |
| nowcourier.files.com | Not in the scope | 2026-11-14 |
| nrfus.files.com | Not in the scope | 2026-11-14 |
| nrfus-test.files.comtest | Not in the scope | 2026-11-14 |
| nrr.files.com | Not in the scope | 2026-11-14 |
| webmail.nrs2001pt.files.commail | Not in the scope | 2026-11-14 |
| ns.files.com | Not in the scope | 2026-11-14 |
| ns1.files.com | Not in the scope | 2026-11-14 |
| ns2.files.com | Not in the scope | 2026-11-14 |
| ns3.files.com | Not in the scope | 2026-11-14 |
| ns4.files.com | Not in the scope | 2026-11-14 |
| nsbsl.files.com | Not in the scope | 2026-11-14 |
| nuclearhotsauce.files.com | Not in the scope | 2026-11-14 |
| nullpointer.files.com | Not in the scope | 2026-11-14 |
| nunatsiavut.files.com | Not in the scope | 2026-11-14 |
| nxg.files.com | Not in the scope | 2026-11-14 |
| nxt.files.com | Not in the scope | 2026-11-14 |
| nxturn.files.com | Not in the scope | 2026-11-14 |
| oa.files.com | Not in the scope | 2026-11-14 |
| oak.files.com | Not in the scope | 2026-11-14 |
| oaknorth.files.com | Not in the scope | 2026-11-14 |
| october.files.com | Not in the scope | 2026-11-14 |
| oda.files.com | Not in the scope | 2026-11-14 |
| oefcu.files.com | Not in the scope | 2026-11-14 |
| offenderlink.files.com | Not in the scope | 2026-11-14 |
| office.files.com | Not in the scope | 2026-11-14 |
| ohnoshedidntsite.files.com | Not in the scope | 2026-11-14 |
| oildex.files.com | Not in the scope | 2026-11-14 |
| okta.files.comauth | Not in the scope | 2026-11-14 |
| old.files.comlegacy | Not in the scope | 2026-11-14 |
| omegapoint.files.com | Not in the scope | 2026-11-14 |
| omegaraptor.files.com | Not in the scope | 2026-11-14 |
| omnia.files.com | Not in the scope | 2026-11-14 |
| omniamowgli.files.com | Not in the scope | 2026-11-14 |
| omnionpower.files.com | Not in the scope | 2026-11-14 |
| onair.files.com | Not in the scope | 2026-11-14 |
| one.files.com | Not in the scope | 2026-11-14 |
| onedatasource.files.com | Not in the scope | 2026-11-14 |
| onelegacy.files.com | Not in the scope | 2026-11-14 |
| onlineprinters.files.com | Not in the scope | 2026-11-14 |
| onpointwarranty.files.com | Not in the scope | 2026-11-14 |
| ontheborder.files.com | Not in the scope | 2026-11-14 |
| onwards.files.com | Not in the scope | 2026-11-14 |
| onypoenya.files.com | Not in the scope | 2026-11-14 |
| opb.files.com | Not in the scope | 2026-11-14 |
| open.files.com | Not in the scope | 2026-11-14 |
| openature.files.com | Not in the scope | 2026-11-14 |
| opengov.files.com | Not in the scope | 2026-11-14 |
| openloophealth.files.com | Not in the scope | 2026-11-14 |
| opensesame.files.com | Not in the scope | 2026-11-14 |
| opiniion.files.com | Not in the scope | 2026-11-14 |
| opiniion2.files.com | Not in the scope | 2026-11-14 |
| optimed.files.com | Not in the scope | 2026-11-14 |
| orchardglobal.files.com | Not in the scope | 2026-11-14 |
| orders.files.com | Not in the scope | 2026-11-14 |
| sftp.powerfaids.org.files.comdata | Not in the scope | 2026-11-14 |
| webmail.orientacioneducativa.files.commail | Not in the scope | 2026-11-14 |
| origin.files.com | Not in the scope | 2026-11-14 |
| origina.files.com | Not in the scope | 2026-11-14 |
| originalsyndicate.files.com | Not in the scope | 2026-11-14 |
3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.