Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
video.app.files.comNot in the scope2026-11-14
videos.app.files.comNot in the scope2026-11-14
view.app.files.comNot in the scope2026-11-14
voice.app.files.comNot in the scope2026-11-14
vpn.app.files.comvpnNot in the scope2026-11-14
wap.app.files.comNot in the scope2026-11-14
web.app.files.comNot in the scope2026-11-14
webdisk.app.files.comNot in the scope2026-11-14
webhook.app.files.comNot in the scope2026-11-14
webmail.app.files.commailNot in the scope2026-11-14
wfm-service.app.files.comNot in the scope2026-11-14
whm.app.files.comNot in the scope2026-11-14
whois.app.files.comNot in the scope2026-11-14
wiki.app.files.comtoolsNot in the scope2026-11-14
wordpress.app.files.comNot in the scope2026-11-14
wp.app.files.comNot in the scope2026-11-14
ww1.app.files.comNot in the scope2026-11-14
www.app.files.comNot in the scope2026-11-14
www1.app.files.comNot in the scope2026-11-14
www2.app.files.comNot in the scope2026-11-14
appcast.files.comNot in the scope2026-11-14
appgarden.files.comNot in the scope2026-11-14
applyvietnamvisa.files.comNot in the scope2026-11-14
apppackaging.files.comNot in the scope2026-11-14
appraisalresearchcorp.files.comNot in the scope2026-11-14
apps.files.comNot in the scope2026-11-14
aptcommerce.files.comNot in the scope2026-11-14
aptv.files.comNot in the scope2026-11-14
aquahawk.files.comNot in the scope2026-11-14
arabella.files.comNot in the scope2026-11-14
aras.files.comNot in the scope2026-11-14
arasgcch.files.comNot in the scope2026-11-14
www.arashian.files.comNot in the scope2026-11-14
arbex.files.comNot in the scope2026-11-14
arbiter.files.comNot in the scope2026-11-14
arcanum.files.comNot in the scope2026-11-14
archdiocese.files.comNot in the scope2026-11-14
archway.files.comNot in the scope2026-11-14
archwaygroup.files.comNot in the scope2026-11-14
arcticaqua.files.comNot in the scope2026-11-14
arduino.files.comNot in the scope2026-11-14
aremedis.files.comNot in the scope2026-11-14
arkinsurance.files.comNot in the scope2026-11-14
arrowhead.files.comNot in the scope2026-11-14
arthritis-uk.files.comNot in the scope2026-11-14
ascendpbm.files.comNot in the scope2026-11-14
ashleyfurniture.files.comNot in the scope2026-11-14
asjed.files.comNot in the scope2026-11-14
assemblyglobal.files.comNot in the scope2026-11-14
assistmd.files.comNot in the scope2026-11-14
associatecapital.files.comNot in the scope2026-11-14
associatedwholesale.files.comNot in the scope2026-11-14
atadvantage.files.comNot in the scope2026-11-14
atcc.files.comNot in the scope2026-11-14
athena-health.files.comNot in the scope2026-11-14
athennian.files.comNot in the scope2026-11-14
atikingames.files.comNot in the scope2026-11-14
atlanticcoastbrands.files.comNot in the scope2026-11-14
atlasreality.files.comNot in the scope2026-11-14
attomdata.files.comNot in the scope2026-11-14
atu.files.comNot in the scope2026-11-14
auctane.files.comNot in the scope2026-11-14
auctionsoftware.files.comNot in the scope2026-11-14
audience-acuity-sftp.files.comdataNot in the scope2026-11-14
audiobrain.files.comNot in the scope2026-11-14
audubon.files.comNot in the scope2026-11-14
aura2.files.comNot in the scope2026-11-14
auth.files.comauthNot in the scope2026-11-14
autoconfig.files.comNot in the scope2026-11-14
autofi2.files.comNot in the scope2026-11-14
autohausaz.files.comNot in the scope2026-11-14
avalon.files.comNot in the scope2026-11-14
avcsbp.files.comNot in the scope2026-11-14
avenu.files.comNot in the scope2026-11-14
avora.files.comNot in the scope2026-11-14
avpowell.files.comNot in the scope2026-11-14
avstepan.files.comNot in the scope2026-11-14
awardco.files.comNot in the scope2026-11-14
awr.files.comNot in the scope2026-11-14
awsdashboard.files.comNot in the scope2026-11-14
awww.files.comNot in the scope2026-11-14
axim.files.comNot in the scope2026-11-14
axiro.files.comNot in the scope2026-11-14
axjer.files.comNot in the scope2026-11-14
axovant.files.comNot in the scope2026-11-14
b.files.comNot in the scope2026-11-14
baiconnect2.files.comNot in the scope2026-11-14
bakkup.files.comNot in the scope2026-11-14
bamsi.files.comNot in the scope2026-11-14
bandy.files.comNot in the scope2026-11-14
bankoflaborsft.files.comNot in the scope2026-11-14
bankprov.files.comNot in the scope2026-11-14
bare.files.comNot in the scope2026-11-14
basic.files.comNot in the scope2026-11-14
basic-nodejs-dev.files.comdevNot in the scope2026-11-14
basistech.files.comNot in the scope2026-11-14
batch.files.comNot in the scope2026-11-14
bateswhite.files.comNot in the scope2026-11-14
battlebank.files.comNot in the scope2026-11-14
bba1esc.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.