Skip to content
Connect AISign inSign up free

Bug bounty program

FC

Files.com

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Root
Scope
Name suggests
First seen
Text file3,165 names
Subdomains of Files.com
NameScopeFirst seen
ks-order-api.app.files.comapiNot in the scope2026-11-14
ks-program-api.app.files.comapiNot in the scope2026-11-14
ks-vendingtransactions-mq0.app.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq1.app.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq2.app.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq3.app.files.comNot in the scope2026-11-14
ks-vendingtransactions-mq4.app.files.comNot in the scope2026-11-14
kubernetes.app.files.comtoolsNot in the scope2026-11-14
lists.app.files.comNot in the scope2026-11-14
liveupdate.app.files.comNot in the scope2026-11-14
localhost.app.files.comdevNot in the scope2026-11-14
login.app.files.comauthNot in the scope2026-11-14
m.app.files.comNot in the scope2026-11-14
mail.app.files.commailNot in the scope2026-11-14
mail1.app.files.commailNot in the scope2026-11-14
mail2.app.files.commailNot in the scope2026-11-14
mailserver.app.files.comNot in the scope2026-11-14
mdm.app.files.comNot in the scope2026-11-14
media.app.files.comNot in the scope2026-11-14
merchandising-preview.app.files.comstagingNot in the scope2026-11-14
metrics.app.files.commonitoringNot in the scope2026-11-14
ml.app.files.comNot in the scope2026-11-14
mobile.app.files.comNot in the scope2026-11-14
mobile-rest.app.files.comNot in the scope2026-11-14
mongo.app.files.comdataNot in the scope2026-11-14
mssql.app.files.comNot in the scope2026-11-14
mta-sts.app.files.comNot in the scope2026-11-14
mx.app.files.commailNot in the scope2026-11-14
mx01.app.files.comNot in the scope2026-11-14
mx1.app.files.comNot in the scope2026-11-14
mx2.app.files.comNot in the scope2026-11-14
mysql.app.files.comdataNot in the scope2026-11-14
new.app.files.comNot in the scope2026-11-14
news.app.files.comNot in the scope2026-11-14
nginx.app.files.comNot in the scope2026-11-14
nginx-newest.app.files.comNot in the scope2026-11-14
nginx-newest1.app.files.comNot in the scope2026-11-14
nodejs.app.files.comNot in the scope2026-11-14
nodejs-dev.app.files.comdevNot in the scope2026-11-14
non-prod.app.files.comNot in the scope2026-11-14
ns.app.files.comNot in the scope2026-11-14
ns1.app.files.comNot in the scope2026-11-14
ns2.app.files.comNot in the scope2026-11-14
ns4.app.files.comNot in the scope2026-11-14
office.app.files.comNot in the scope2026-11-14
okta.app.files.comauthNot in the scope2026-11-14
old.app.files.comlegacyNot in the scope2026-11-14
orders.app.files.comNot in the scope2026-11-14
outlook.app.files.comNot in the scope2026-11-14
owa.app.files.commailNot in the scope2026-11-14
pop.app.files.comNot in the scope2026-11-14
portal.app.files.comNot in the scope2026-11-14
postmaster.app.files.comNot in the scope2026-11-14
pre.app.files.comNot in the scope2026-11-14
pre-prod.app.files.comNot in the scope2026-11-14
preview.app.files.comstagingNot in the scope2026-11-14
proxy.app.files.comNot in the scope2026-11-14
publishing-catalog.app.files.comNot in the scope2026-11-14
publishing-preview.app.files.comstagingNot in the scope2026-11-14
remote.app.files.comvpnNot in the scope2026-11-14
retail.app.files.comNot in the scope2026-11-14
root.app.files.comNot in the scope2026-11-14
rx.app.files.comNot in the scope2026-11-14
searchportal.app.files.comNot in the scope2026-11-14
searchportal-dev.app.files.comdevNot in the scope2026-11-14
searchportal-qa.app.files.comtestNot in the scope2026-11-14
secure.app.files.comNot in the scope2026-11-14
server.app.files.comNot in the scope2026-11-14
server1.app.files.comNot in the scope2026-11-14
servers.app.files.comNot in the scope2026-11-14
shop.app.files.comNot in the scope2026-11-14
signin.app.files.comauthNot in the scope2026-11-14
signup.app.files.comNot in the scope2026-11-14
sip.app.files.comNot in the scope2026-11-14
sitecore.app.files.comNot in the scope2026-11-14
smtp.app.files.commailNot in the scope2026-11-14
spf.app.files.comNot in the scope2026-11-14
sql.app.files.comNot in the scope2026-11-14
ssl.app.files.comNot in the scope2026-11-14
sslvpn.app.files.comvpnNot in the scope2026-11-14
sso.app.files.comauthNot in the scope2026-11-14
stage.app.files.comstagingNot in the scope2026-11-14
staging.app.files.comstagingNot in the scope2026-11-14
static.app.files.comNot in the scope2026-11-14
stats.app.files.comNot in the scope2026-11-14
store.app.files.comNot in the scope2026-11-14
support.app.files.comNot in the scope2026-11-14
test.app.files.comtestNot in the scope2026-11-14
tls.app.files.comNot in the scope2026-11-14
tools.app.files.comNot in the scope2026-11-14
tx.app.files.comNot in the scope2026-11-14
uk.app.files.comNot in the scope2026-11-14
upload.app.files.comdataNot in the scope2026-11-14
us-east.app.files.comNot in the scope2026-11-14
us-east-1.app.files.comNot in the scope2026-11-14
useast.app.files.comNot in the scope2026-11-14
vault.app.files.comtoolsNot in the scope2026-11-14
vendor.app.files.comNot in the scope2026-11-14
vendor-api.app.files.comapiNot in the scope2026-11-14
vendors.app.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated