Skip to content
Connect AISign inSign up free

Bug bounty program

FC

Files.com

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Root
Scope
Name suggests
First seen
Text file3,165 names
Subdomains of Files.com
NameScopeFirst seen
s-kahler.di.app.files.comNot in the scope2026-11-14
s-kurvv.di.app.files.comNot in the scope2026-11-14
s-landis.di.app.files.comNot in the scope2026-11-14
s-legalshield.di.app.files.comNot in the scope2026-11-14
s-lessonly.di.app.files.comNot in the scope2026-11-14
s-linkup.di.app.files.comNot in the scope2026-11-14
s-lityx.di.app.files.comNot in the scope2026-11-14
s-merle.di.app.files.comNot in the scope2026-11-14
s-merlenorman.di.app.files.comNot in the scope2026-11-14
s-myfcbusa.di.app.files.comNot in the scope2026-11-14
s-niteo.di.app.files.comNot in the scope2026-11-14
s-nxt.di.app.files.comNot in the scope2026-11-14
s-onelegacy.di.app.files.comNot in the scope2026-11-14
s-oneshield.di.app.files.comNot in the scope2026-11-14
s-origina.di.app.files.comNot in the scope2026-11-14
s-p2d.di.app.files.comNot in the scope2026-11-14
s-park.di.app.files.comNot in the scope2026-11-14
s-paylease-eng.di.app.files.comNot in the scope2026-11-14
s-peerfit.di.app.files.comNot in the scope2026-11-14
s-plnu.di.app.files.comNot in the scope2026-11-14
s-pmsftp.di.app.files.comNot in the scope2026-11-14
s-premio.di.app.files.comNot in the scope2026-11-14
s-sandboxcorpaxe.di.app.files.comNot in the scope2026-11-14
s-save.di.app.files.comNot in the scope2026-11-14
s-shepardes.di.app.files.comNot in the scope2026-11-14
s-shippeo.di.app.files.comNot in the scope2026-11-14
s-smatechnologies.di.app.files.comNot in the scope2026-11-14
s-spencergifts.di.app.files.comNot in the scope2026-11-14
s-stellarmls.di.app.files.comNot in the scope2026-11-14
s-stylearcade.di.app.files.comNot in the scope2026-11-14
s-syniti2.di.app.files.comNot in the scope2026-11-14
s-tabs.di.app.files.comNot in the scope2026-11-14
s-tapclicks.di.app.files.comNot in the scope2026-11-14
s-taubensee.di.app.files.comNot in the scope2026-11-14
s-taulia.di.app.files.comNot in the scope2026-11-14
s-tbx.di.app.files.comNot in the scope2026-11-14
s-tmhna.di.app.files.comNot in the scope2026-11-14
s-torrid.di.app.files.comNot in the scope2026-11-14
s-transsped.di.app.files.comNot in the scope2026-11-14
s-trusteddata.di.app.files.comNot in the scope2026-11-14
s-uco.di.app.files.comNot in the scope2026-11-14
s-ugiftideas.di.app.files.comNot in the scope2026-11-14
s-unither.di.app.files.comNot in the scope2026-11-14
s-valuelabs.di.app.files.comNot in the scope2026-11-14
s-velocity.di.app.files.comNot in the scope2026-11-14
s-vensure.di.app.files.comNot in the scope2026-11-14
s-vpat.di.app.files.comNot in the scope2026-11-14
s-wand.di.app.files.comNot in the scope2026-11-14
s-wvia.di.app.files.comNot in the scope2026-11-14
dnm.app.files.comNot in the scope2026-11-14
dns.app.files.comNot in the scope2026-11-14
dns1.app.files.comNot in the scope2026-11-14
dns2.app.files.comNot in the scope2026-11-14
dogfood-dev.app.files.comdevNot in the scope2026-11-14
download.app.files.comNot in the scope2026-11-14
dyn.app.files.comNot in the scope2026-11-14
edge.app.files.comNot in the scope2026-11-14
elastic.app.files.comdataNot in the scope2026-11-14
email.app.files.comNot in the scope2026-11-14
en.app.files.comNot in the scope2026-11-14
exchange.app.files.commailNot in the scope2026-11-14
forum.app.files.comNot in the scope2026-11-14
forums.app.files.comNot in the scope2026-11-14
ftp.app.files.comdataNot in the scope2026-11-14
fw.app.files.comNot in the scope2026-11-14
ga.app.files.comNot in the scope2026-11-14
gac-rds-external-readonly.app.files.comNot in the scope2026-11-14
gac-rds-external-readonly-preprod.app.files.comstagingNot in the scope2026-11-14
gcom-product-find-dev.app.files.comdevNot in the scope2026-11-14
gcom-product-find-qa.app.files.comtestNot in the scope2026-11-14
git.app.files.comgitNot in the scope2026-11-14
gitlab.app.files.comgitNot in the scope2026-11-14
go.app.files.comNot in the scope2026-11-14
gui.app.files.comNot in the scope2026-11-14
gw.app.files.comNot in the scope2026-11-14
gws.app.files.comNot in the scope2026-11-14
gws-api-sandbox.app.files.comapi, testNot in the scope2026-11-14
gws-dev.app.files.comdevNot in the scope2026-11-14
gws-qa.app.files.comtestNot in the scope2026-11-14
gws-rds-external-readonly-uat.app.files.comtestNot in the scope2026-11-14
gws-uat.app.files.comtestNot in the scope2026-11-14
help.app.files.comNot in the scope2026-11-14
home.app.files.comNot in the scope2026-11-14
hostmaster.app.files.comNot in the scope2026-11-14
httpbin.app.files.comNot in the scope2026-11-14
iam.app.files.comauthNot in the scope2026-11-14
images.app.files.comNot in the scope2026-11-14
imap.app.files.commailNot in the scope2026-11-14
img.app.files.comNot in the scope2026-11-14
inbound.app.files.comNot in the scope2026-11-14
info.app.files.comNot in the scope2026-11-14
ip.app.files.comNot in the scope2026-11-14
ipv6.app.files.comNot in the scope2026-11-14
job.app.files.comNot in the scope2026-11-14
jobs.app.files.comNot in the scope2026-11-14
k8s.app.files.comtoolsNot in the scope2026-11-14
knowledgemanagement.app.files.comNot in the scope2026-11-14
ks-inventory-api.app.files.comapiNot in the scope2026-11-14
ks-invoice-api.app.files.comapiNot in the scope2026-11-14
ks-limits-api.app.files.comapiNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated