Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
bba1escvitima.files.comNot in the scope2026-11-14
bbcritical-new1.files.comNot in the scope2026-11-14
bbs.files.comNot in the scope2026-11-14
bcif.files.comNot in the scope2026-11-14
bcps.files.comNot in the scope2026-11-14
bdm.files.comNot in the scope2026-11-14
be-power-equipment.files.comNot in the scope2026-11-14
doctormo.files.beardoctormo.files.comdataNot in the scope2026-11-14
indlovu.files.bearindlovu.files.comdataNot in the scope2026-11-14
bearvip.files.comNot in the scope2026-11-14
beck.files.comNot in the scope2026-11-14
bellehaven.files.comNot in the scope2026-11-14
benefitsappftp.files.comNot in the scope2026-11-14
benmedica.files.comNot in the scope2026-11-14
bertelnet.files.comNot in the scope2026-11-14
beta.files.comstagingNot in the scope2026-11-14
betterview.files.comNot in the scope2026-11-14
bettrdata-io.files.comNot in the scope2026-11-14
bighand2.files.comNot in the scope2026-11-14
bigthink.files.comNot in the scope2026-11-14
bilt.files.comNot in the scope2026-11-14
bionostics.files.comNot in the scope2026-11-14
bl.files.comNot in the scope2026-11-14
bl-staging.files.comstagingNot in the scope2026-11-14
blackkite.files.comNot in the scope2026-11-14
blackribbon.files.comNot in the scope2026-11-14
blackstone.files.comNot in the scope2026-11-14
blancco.files.comNot in the scope2026-11-14
blanccotest.files.comNot in the scope2026-11-14
blizzard.files.comNot in the scope2026-11-14
blog.files.comNot in the scope2026-11-14
blogs.files.comNot in the scope2026-11-14
bloodhub.files.comNot in the scope2026-11-14
blueplanet.files.comNot in the scope2026-11-14
blusky.files.comNot in the scope2026-11-14
bockwurst.files.comNot in the scope2026-11-14
bolagency.files.comNot in the scope2026-11-14
bolero.files.comNot in the scope2026-11-14
boliviana.files.comNot in the scope2026-11-14
bolognauncovered.files.comNot in the scope2026-11-14
bonnie1210.files.comNot in the scope2026-11-14
bonniedoonyouth.files.comNot in the scope2026-11-14
book.files.comNot in the scope2026-11-14
www.book.files.comNot in the scope2026-11-14
boredinthebackseat.files.comNot in the scope2026-11-14
bostonherald.files.comNot in the scope2026-11-14
bradyims.files.comNot in the scope2026-11-14
brandfolder.files.comNot in the scope2026-11-14
brandintegrity.files.comNot in the scope2026-11-14
brandnewbag.files.comNot in the scope2026-11-14
brandxads.files.comNot in the scope2026-11-14
brettphillips.files.comNot in the scope2026-11-14
brfiles.files.comNot in the scope2026-11-14
brightonjones.files.comNot in the scope2026-11-14
britishredcross.files.comNot in the scope2026-11-14
brittdussaultdotcom.files.comNot in the scope2026-11-14
brogdon.files.comNot in the scope2026-11-14
brookfieldproperties.files.comNot in the scope2026-11-14
brooks.files.comNot in the scope2026-11-14
bsa.files.comNot in the scope2026-11-14
ts.io.bubicattr0219.files.comNot in the scope2026-11-14
bucklersecurities.files.comNot in the scope2026-11-14
bud.files.comNot in the scope2026-11-14
bugbounty1311.files.comNot in the scope2026-11-14
bugbountycritical.files.comNot in the scope2026-11-14
bugbountydecompany001.files.comNot in the scope2026-11-14
bugbountydeliver.files.comNot in the scope2026-11-14
bugbountydelta.files.comNot in the scope2026-11-14
bugbountyecholab.files.comNot in the scope2026-11-14
bugbountyfifth.files.comNot in the scope2026-11-14
bugbountyhoney.files.comNot in the scope2026-11-14
bugbountyluqii5.files.comNot in the scope2026-11-14
bugbountyluqiihackeronetrial.files.comNot in the scope2026-11-14
bugbountysecurityresearch4.files.comNot in the scope2026-11-14
bugbountytesst.files.comNot in the scope2026-11-14
bugbountytest58.files.comNot in the scope2026-11-14
bugbountytrialcompany1008.files.comNot in the scope2026-11-14
bugbountytrialcompany1390.files.comNot in the scope2026-11-14
bugbountytrialcompany248.files.comNot in the scope2026-11-14
bugbountytrialcompany595.files.comNot in the scope2026-11-14
bugbountytrialcompany936.files.comNot in the scope2026-11-14
bugbountytrialcompanyb5.files.comNot in the scope2026-11-14
bugbountyvad2.files.comNot in the scope2026-11-14
builder.files.comNot in the scope2026-11-14
buildinglink.files.comNot in the scope2026-11-14
buildwithimpact.files.comNot in the scope2026-11-14
bumbyphotographyblog.files.comNot in the scope2026-11-14
burchfieldgroup.files.comNot in the scope2026-11-14
busy.files.comNot in the scope2026-11-14
butlertill.files.comNot in the scope2026-11-14
bwfzuri.files.comNot in the scope2026-11-14
dcsolw.by.files.comNot in the scope2026-11-14
byoip.files.comNot in the scope2026-11-14
byron.files.comNot in the scope2026-11-14
bytechindia.files.comNot in the scope2026-11-14
c.files.comNot in the scope2026-11-14
c4carbides-ftp.files.comdataNot in the scope2026-11-14
www.cabs.files.comNot in the scope2026-11-14
caf.files.comNot in the scope2026-11-14
calamosinvestments.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.