Bug bounty program
FC
Files.com
Most upvoted reports3
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001 | No weakness recorded | 2017-04-16 | $600 | 29 |
| Existence of Folder path by guessing the path through response#174645 | Information Disclosure | 2017-05-02 | – | 15 |
| CSRF @ configuration#208734 | Cross-Site Request Forgery | 2017-05-27 | – | 8 |
Subdomains3,165
| Name | Scope | First seen |
|---|---|---|
| video.app.files.com | Not in the scope | 2026-11-14 |
| videos.app.files.com | Not in the scope | 2026-11-14 |
| view.app.files.com | Not in the scope | 2026-11-14 |
| voice.app.files.com | Not in the scope | 2026-11-14 |
| vpn.app.files.comvpn | Not in the scope | 2026-11-14 |
| wap.app.files.com | Not in the scope | 2026-11-14 |
| web.app.files.com | Not in the scope | 2026-11-14 |
| webdisk.app.files.com | Not in the scope | 2026-11-14 |
| webhook.app.files.com | Not in the scope | 2026-11-14 |
| webmail.app.files.commail | Not in the scope | 2026-11-14 |
| wfm-service.app.files.com | Not in the scope | 2026-11-14 |
| whm.app.files.com | Not in the scope | 2026-11-14 |
| whois.app.files.com | Not in the scope | 2026-11-14 |
| wiki.app.files.comtools | Not in the scope | 2026-11-14 |
| wordpress.app.files.com | Not in the scope | 2026-11-14 |
| wp.app.files.com | Not in the scope | 2026-11-14 |
| ww1.app.files.com | Not in the scope | 2026-11-14 |
| www.app.files.com | Not in the scope | 2026-11-14 |
| www1.app.files.com | Not in the scope | 2026-11-14 |
| www2.app.files.com | Not in the scope | 2026-11-14 |
| appcast.files.com | Not in the scope | 2026-11-14 |
| appgarden.files.com | Not in the scope | 2026-11-14 |
| applyvietnamvisa.files.com | Not in the scope | 2026-11-14 |
| apppackaging.files.com | Not in the scope | 2026-11-14 |
| appraisalresearchcorp.files.com | Not in the scope | 2026-11-14 |
| apps.files.com | Not in the scope | 2026-11-14 |
| aptcommerce.files.com | Not in the scope | 2026-11-14 |
| aptv.files.com | Not in the scope | 2026-11-14 |
| aquahawk.files.com | Not in the scope | 2026-11-14 |
| arabella.files.com | Not in the scope | 2026-11-14 |
| aras.files.com | Not in the scope | 2026-11-14 |
| arasgcch.files.com | Not in the scope | 2026-11-14 |
| www.arashian.files.com | Not in the scope | 2026-11-14 |
| arbex.files.com | Not in the scope | 2026-11-14 |
| arbiter.files.com | Not in the scope | 2026-11-14 |
| arcanum.files.com | Not in the scope | 2026-11-14 |
| archdiocese.files.com | Not in the scope | 2026-11-14 |
| archway.files.com | Not in the scope | 2026-11-14 |
| archwaygroup.files.com | Not in the scope | 2026-11-14 |
| arcticaqua.files.com | Not in the scope | 2026-11-14 |
| arduino.files.com | Not in the scope | 2026-11-14 |
| aremedis.files.com | Not in the scope | 2026-11-14 |
| arkinsurance.files.com | Not in the scope | 2026-11-14 |
| arrowhead.files.com | Not in the scope | 2026-11-14 |
| arthritis-uk.files.com | Not in the scope | 2026-11-14 |
| ascendpbm.files.com | Not in the scope | 2026-11-14 |
| ashleyfurniture.files.com | Not in the scope | 2026-11-14 |
| asjed.files.com | Not in the scope | 2026-11-14 |
| assemblyglobal.files.com | Not in the scope | 2026-11-14 |
| assistmd.files.com | Not in the scope | 2026-11-14 |
| associatecapital.files.com | Not in the scope | 2026-11-14 |
| associatedwholesale.files.com | Not in the scope | 2026-11-14 |
| atadvantage.files.com | Not in the scope | 2026-11-14 |
| atcc.files.com | Not in the scope | 2026-11-14 |
| athena-health.files.com | Not in the scope | 2026-11-14 |
| athennian.files.com | Not in the scope | 2026-11-14 |
| atikingames.files.com | Not in the scope | 2026-11-14 |
| atlanticcoastbrands.files.com | Not in the scope | 2026-11-14 |
| atlasreality.files.com | Not in the scope | 2026-11-14 |
| attomdata.files.com | Not in the scope | 2026-11-14 |
| atu.files.com | Not in the scope | 2026-11-14 |
| auctane.files.com | Not in the scope | 2026-11-14 |
| auctionsoftware.files.com | Not in the scope | 2026-11-14 |
| audience-acuity-sftp.files.comdata | Not in the scope | 2026-11-14 |
| audiobrain.files.com | Not in the scope | 2026-11-14 |
| audubon.files.com | Not in the scope | 2026-11-14 |
| aura2.files.com | Not in the scope | 2026-11-14 |
| auth.files.comauth | Not in the scope | 2026-11-14 |
| autoconfig.files.com | Not in the scope | 2026-11-14 |
| autofi2.files.com | Not in the scope | 2026-11-14 |
| autohausaz.files.com | Not in the scope | 2026-11-14 |
| avalon.files.com | Not in the scope | 2026-11-14 |
| avcsbp.files.com | Not in the scope | 2026-11-14 |
| avenu.files.com | Not in the scope | 2026-11-14 |
| avora.files.com | Not in the scope | 2026-11-14 |
| avpowell.files.com | Not in the scope | 2026-11-14 |
| avstepan.files.com | Not in the scope | 2026-11-14 |
| awardco.files.com | Not in the scope | 2026-11-14 |
| awr.files.com | Not in the scope | 2026-11-14 |
| awsdashboard.files.com | Not in the scope | 2026-11-14 |
| awww.files.com | Not in the scope | 2026-11-14 |
| axim.files.com | Not in the scope | 2026-11-14 |
| axiro.files.com | Not in the scope | 2026-11-14 |
| axjer.files.com | Not in the scope | 2026-11-14 |
| axovant.files.com | Not in the scope | 2026-11-14 |
| b.files.com | Not in the scope | 2026-11-14 |
| baiconnect2.files.com | Not in the scope | 2026-11-14 |
| bakkup.files.com | Not in the scope | 2026-11-14 |
| bamsi.files.com | Not in the scope | 2026-11-14 |
| bandy.files.com | Not in the scope | 2026-11-14 |
| bankoflaborsft.files.com | Not in the scope | 2026-11-14 |
| bankprov.files.com | Not in the scope | 2026-11-14 |
| bare.files.com | Not in the scope | 2026-11-14 |
| basic.files.com | Not in the scope | 2026-11-14 |
| basic-nodejs-dev.files.comdev | Not in the scope | 2026-11-14 |
| basistech.files.com | Not in the scope | 2026-11-14 |
| batch.files.com | Not in the scope | 2026-11-14 |
| bateswhite.files.com | Not in the scope | 2026-11-14 |
| battlebank.files.com | Not in the scope | 2026-11-14 |
| bba1esc.files.com | Not in the scope | 2026-11-14 |
3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.