Skip to content
Connect AISign inSign up free

Bug bounty program

FC

Files.com

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Root
Scope
Name suggests
First seen
Text file3,165 names
Subdomains of Files.com
NameScopeFirst seen
anteristech.files.comNot in the scope2026-11-14
antikleidi.files.comNot in the scope2026-11-14
api.files.comapiNot in the scope2026-11-14
app.files.comIn scope2026-11-14
_cisco-uds.app.files.comNot in the scope2026-11-14
_collab-edge.app.files.comNot in the scope2026-11-14
_cuplogin.app.files.comNot in the scope2026-11-14
_dmarc.app.files.comNot in the scope2026-11-14
_etcd-server-ssl.app.files.comNot in the scope2026-11-14
_mta-sts.app.files.comNot in the scope2026-11-14
_tcp.app.files.comNot in the scope2026-11-14
_cisco-uds._tcp.app.files.comNot in the scope2026-11-14
_cuplogin._tcp.app.files.comNot in the scope2026-11-14
_tls.app.files.comNot in the scope2026-11-14
_collab-edge._tls.app.files.comNot in the scope2026-11-14
a.app.files.comNot in the scope2026-11-14
acapi.app.files.comNot in the scope2026-11-14
admin.app.files.comadminNot in the scope2026-11-14
akamai.app.files.comNot in the scope2026-11-14
akamai-test.app.files.comtestNot in the scope2026-11-14
akamai-test-origin.app.files.comtestNot in the scope2026-11-14
api.app.files.comapiNot in the scope2026-11-14
app.app.files.comNot in the scope2026-11-14
assets.app.files.comNot in the scope2026-11-14
auth.app.files.comauthNot in the scope2026-11-14
autoconfig.app.files.comNot in the scope2026-11-14
autodiscover.app.files.commailNot in the scope2026-11-14
awsdashboard.app.files.comNot in the scope2026-11-14
b.app.files.comNot in the scope2026-11-14
basic.app.files.comNot in the scope2026-11-14
basic-nodejs-dev.app.files.comdevNot in the scope2026-11-14
beta.app.files.comstagingNot in the scope2026-11-14
blog.app.files.comNot in the scope2026-11-14
builder.app.files.comNot in the scope2026-11-14
c.app.files.comNot in the scope2026-11-14
careers.app.files.comNot in the scope2026-11-14
cdn.app.files.comNot in the scope2026-11-14
cdq-api.app.files.comapiNot in the scope2026-11-14
cert.app.files.comNot in the scope2026-11-14
certificate.app.files.comNot in the scope2026-11-14
check.app.files.comNot in the scope2026-11-14
cim-api.app.files.comapiNot in the scope2026-11-14
cim-api-dev.app.files.comapi, devNot in the scope2026-11-14
cim-api-qa.app.files.comapi, testNot in the scope2026-11-14
cim-api-uat.app.files.comapi, testNot in the scope2026-11-14
cim-data-quality-qa.app.files.comtestNot in the scope2026-11-14
cim-dev.app.files.comdevNot in the scope2026-11-14
cim-geo-dev.app.files.comdevNot in the scope2026-11-14
citrix.app.files.comvpnNot in the scope2026-11-14
click.app.files.comNot in the scope2026-11-14
cloud.app.files.comNot in the scope2026-11-14
cname.app.files.comNot in the scope2026-11-14
code.app.files.comNot in the scope2026-11-14
collab.app.files.comNot in the scope2026-11-14
consul.app.files.comtoolsNot in the scope2026-11-14
cp.app.files.comNot in the scope2026-11-14
cpanel.app.files.comadminNot in the scope2026-11-14
crm.app.files.comNot in the scope2026-11-14
cveapi.app.files.comNot in the scope2026-11-14
danieapp.app.files.comNot in the scope2026-11-14
db.app.files.comdataNot in the scope2026-11-14
dc.app.files.comNot in the scope2026-11-14
de.app.files.comNot in the scope2026-11-14
demo.app.files.comtestNot in the scope2026-11-14
dev.app.files.comdevNot in the scope2026-11-14
di.app.files.comNot in the scope2026-11-14
s-aeltc.di.app.files.comNot in the scope2026-11-14
s-afs.di.app.files.comNot in the scope2026-11-14
s-alight.di.app.files.comNot in the scope2026-11-14
s-alightdv.di.app.files.comNot in the scope2026-11-14
s-alightncc.di.app.files.comNot in the scope2026-11-14
s-amytestchild.di.app.files.comNot in the scope2026-11-14
s-ashleyfurniture.di.app.files.comNot in the scope2026-11-14
s-atu.di.app.files.comNot in the scope2026-11-14
s-canadianblackbook.di.app.files.comNot in the scope2026-11-14
s-cancommunity.di.app.files.comNot in the scope2026-11-14
s-centeron.di.app.files.comNot in the scope2026-11-14
s-chegg.di.app.files.comNot in the scope2026-11-14
s-corpaxe.di.app.files.comNot in the scope2026-11-14
s-crisprtx.di.app.files.comNot in the scope2026-11-14
s-dalebussetest.di.app.files.comNot in the scope2026-11-14
s-databaseusa.di.app.files.comNot in the scope2026-11-14
s-digicert.di.app.files.comNot in the scope2026-11-14
s-directmailers.di.app.files.comNot in the scope2026-11-14
s-dollarenergy.di.app.files.comNot in the scope2026-11-14
s-efx-prd-us.di.app.files.comNot in the scope2026-11-14
s-efx-uat-us.di.app.files.comtestNot in the scope2026-11-14
s-envysion.di.app.files.comNot in the scope2026-11-14
s-faveo.di.app.files.comNot in the scope2026-11-14
s-filefinning.di.app.files.comNot in the scope2026-11-14
s-filefinningdev.di.app.files.comNot in the scope2026-11-14
s-finningequipmentdev.di.app.files.comNot in the scope2026-11-14
s-flyingbark.di.app.files.comNot in the scope2026-11-14
s-gabrielgroup.di.app.files.comNot in the scope2026-11-14
s-gabrielgroup2.di.app.files.comNot in the scope2026-11-14
s-godaddyregistry.di.app.files.comNot in the scope2026-11-14
s-integration-peerfittest.di.app.files.comNot in the scope2026-11-14
s-invoiceiq.di.app.files.comNot in the scope2026-11-14
s-justin.di.app.files.comNot in the scope2026-11-14
s-justintest.di.app.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated