Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through responseAnalysed#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
pre.files.comNot in the scope2026-11-14
pre-prod.files.comNot in the scope2026-11-14
precisionconnect.files.comNot in the scope2026-11-14
preludecapital.files.comNot in the scope2026-11-14
prepass.files.comNot in the scope2026-11-14
pressworks.files.comNot in the scope2026-11-14
www.prestige4u.files.comNot in the scope2026-11-14
prevention.files.comNot in the scope2026-11-14
preview.files.comstagingNot in the scope2026-11-14
primrosemed.files.comNot in the scope2026-11-14
princeparker.files.comNot in the scope2026-11-14
prismagraphic.files.comNot in the scope2026-11-14
privatecap.files.comNot in the scope2026-11-14
privatewealth.files.comNot in the scope2026-11-14
privatsexchat.files.comNot in the scope2026-11-14
pro2colpf.files.comNot in the scope2026-11-14
probeinfoftp.files.comNot in the scope2026-11-14
probrand.files.comNot in the scope2026-11-14
processmap.files.comNot in the scope2026-11-14
prodege.files.comNot in the scope2026-11-14
product-team-legacy.files.comlegacyNot in the scope2026-11-14
profad.files.comNot in the scope2026-11-14
profileplan.files.comNot in the scope2026-11-14
project.files.comNot in the scope2026-11-14
prolink.files.comNot in the scope2026-11-14
promoviatgesblog.files.comNot in the scope2026-11-14
proservice.files.comNot in the scope2026-11-14
providemedia.files.comNot in the scope2026-11-14
providershealth.files.comNot in the scope2026-11-14
proxy.files.comNot in the scope2026-11-14
psi.files.comNot in the scope2026-11-14
pt200.files.comNot in the scope2026-11-14
pt3.files.comNot in the scope2026-11-14
public-interest.files.comNot in the scope2026-11-14
www.publicityqueen.files.comNot in the scope2026-11-14
publishing-catalog.files.comNot in the scope2026-11-14
publishing-preview.files.comstagingNot in the scope2026-11-14
outbound.pucbiology.files.comNot in the scope2026-11-14
pulte.files.comNot in the scope2026-11-14
purcell.files.comNot in the scope2026-11-14
pure.files.comNot in the scope2026-11-14
pureincubation.files.comNot in the scope2026-11-14
pwnhealth.files.comNot in the scope2026-11-14
qdoba.files.comNot in the scope2026-11-14
qe.files.comNot in the scope2026-11-14
qt.files.comNot in the scope2026-11-14
quake.files.comNot in the scope2026-11-14
qualisystems.files.comNot in the scope2026-11-14
questgates.files.comNot in the scope2026-11-14
quility.files.comNot in the scope2026-11-14
quraniclabs.files.comNot in the scope2026-11-14
rac.files.comNot in the scope2026-11-14
rac-npe.files.comNot in the scope2026-11-14
racer.files.comNot in the scope2026-11-14
rad-ciphertest.files.comNot in the scope2026-11-14
rad-secure.files.comNot in the scope2026-11-14
radianresearch.files.comNot in the scope2026-11-14
radiocristiandad.files.comNot in the scope2026-11-14
ragbone.files.comNot in the scope2026-11-14
rahr.files.comNot in the scope2026-11-14
rainbowshops.files.comNot in the scope2026-11-14
raisedbywolffs.files.comNot in the scope2026-11-14
raiyhaan.files.comNot in the scope2026-11-14
ralawise.files.comNot in the scope2026-11-14
rampapublicidad.files.comNot in the scope2026-11-14
ramsey.files.comNot in the scope2026-11-14
rapidonline.files.comNot in the scope2026-11-14
raremed.files.comNot in the scope2026-11-14
raremedpsc.files.comNot in the scope2026-11-14
ray-insights.files.comNot in the scope2026-11-14
raycomsports.files.comNot in the scope2026-11-14
readwritedigital.files.comNot in the scope2026-11-14
readytraining.files.comNot in the scope2026-11-14
realestateapi.files.comNot in the scope2026-11-14
redislabs.files.comNot in the scope2026-11-14
redtraining.files.comNot in the scope2026-11-14
reflectionsofamedicalstudent.files.comNot in the scope2026-11-14
refugio305.files.comNot in the scope2026-11-14
regentbank.files.comNot in the scope2026-11-14
reguardprotection.files.comNot in the scope2026-11-14
reliant.files.comNot in the scope2026-11-14
reliantrehab.files.comNot in the scope2026-11-14
reliantrehabold1133686.files.comNot in the scope2026-11-14
remedyanalytics.files.comNot in the scope2026-11-14
remira.files.comNot in the scope2026-11-14
remmele.files.comNot in the scope2026-11-14
remo2.files.comNot in the scope2026-11-14
remote.files.comvpnNot in the scope2026-11-14
remotesandsyncs.files.comNot in the scope2026-11-14
replink.files.comNot in the scope2026-11-14
repo.files.comgitNot in the scope2026-11-14
www.reporterisme.files.comNot in the scope2026-11-14
reputation.files.comNot in the scope2026-11-14
researchforaction.files.comNot in the scope2026-11-14
resicap.files.comNot in the scope2026-11-14
resilinc.files.comNot in the scope2026-11-14
resilincresilinc.files.comNot in the scope2026-11-14
resource.files.comNot in the scope2026-11-14
resourceinnovations.files.comNot in the scope2026-11-14
retail.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.