Bug bounty program
FC
Files.com
Most upvoted reports3
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001 | No weakness recorded | 2017-04-16 | $600 | 29 |
| Existence of Folder path by guessing the path through response#174645 | Information Disclosure | 2017-05-02 | – | 15 |
| CSRF @ configuration#208734 | Cross-Site Request Forgery | 2017-05-27 | – | 8 |
Subdomains3,165
| Name | Scope | First seen |
|---|---|---|
| closethegap.files.com | Not in the scope | 2026-11-14 |
| cloud.files.com | Not in the scope | 2026-11-14 |
| cloud9phone.files.com | Not in the scope | 2026-11-14 |
| cloudfactory.files.com | Not in the scope | 2026-11-14 |
| cloudshape.files.com | Not in the scope | 2026-11-14 |
| clough.files.com | Not in the scope | 2026-11-14 |
| clv.files.com | Not in the scope | 2026-11-14 |
| cm-labs.files.com | Not in the scope | 2026-11-14 |
| cmgl.files.com | Not in the scope | 2026-11-14 |
| cmitsolutions.files.com | Not in the scope | 2026-11-14 |
| cmnhospitals.files.com | Not in the scope | 2026-11-14 |
| cmple.files.com | Not in the scope | 2026-11-14 |
| cname.files.com | Not in the scope | 2026-11-14 |
| sexydesktop.co.files.com | Not in the scope | 2026-11-14 |
| coalitioninc.files.com | Not in the scope | 2026-11-14 |
| coastalbank.files.com | Not in the scope | 2026-11-14 |
| cobaltcu.files.com | Not in the scope | 2026-11-14 |
| cocollective.files.com | Not in the scope | 2026-11-14 |
| code.files.com | Not in the scope | 2026-11-14 |
| codefi.files.com | Not in the scope | 2026-11-14 |
| codeminds.files.com | Not in the scope | 2026-11-14 |
| cognitive.files.com | Not in the scope | 2026-11-14 |
| cognizant-uk.files.com | Not in the scope | 2026-11-14 |
| coherent.files.com | Not in the scope | 2026-11-14 |
| colinx.files.com | Not in the scope | 2026-11-14 |
| colisweb.files.com | Not in the scope | 2026-11-14 |
| collab.files.com | Not in the scope | 2026-11-14 |
| collaborative.files.com | Not in the scope | 2026-11-14 |
| collectai.files.com | Not in the scope | 2026-11-14 |
| collectrium.files.com | Not in the scope | 2026-11-14 |
| collins.files.com | Not in the scope | 2026-11-14 |
| colonial.files.com | Not in the scope | 2026-11-14 |
| column.files.com | Not in the scope | 2026-11-14 |
| com.files.com | Not in the scope | 2026-11-14 |
| smartfile.datalink.com.files.com | Not in the scope | 2026-11-14 |
| file.finning.com.files.com | Not in the scope | 2026-11-14 |
| smartfile.insight.com.files.com | Not in the scope | 2026-11-14 |
| web1.com.files.com | Not in the scope | 2026-11-14 |
| web2.com.files.com | Not in the scope | 2026-11-14 |
| web3.com.files.com | Not in the scope | 2026-11-14 |
| windowsservicesantivirus.com.files.com | Not in the scope | 2026-11-14 |
| communicare.files.com | Not in the scope | 2026-11-14 |
| communityhealthaccess.files.com | Not in the scope | 2026-11-14 |
| communitypowernh.files.com | Not in the scope | 2026-11-14 |
| completecare.files.com | Not in the scope | 2026-11-14 |
| completediscovery.files.com | Not in the scope | 2026-11-14 |
| completesolutions.files.com | Not in the scope | 2026-11-14 |
| compliancesupervisors.files.com | Not in the scope | 2026-11-14 |
| comptech.files.com | Not in the scope | 2026-11-14 |
| compu-mail.files.commail | Not in the scope | 2026-11-14 |
| conan.files.com | Not in the scope | 2026-11-14 |
| concentric.files.com | Not in the scope | 2026-11-14 |
| conde.files.com | Not in the scope | 2026-11-14 |
| confluent.files.com | Not in the scope | 2026-11-14 |
| congruity2.files.com | Not in the scope | 2026-11-14 |
| connectivitysource.files.com | Not in the scope | 2026-11-14 |
| connexpay.files.com | Not in the scope | 2026-11-14 |
| connexure.files.com | Not in the scope | 2026-11-14 |
| conservgrp.files.com | Not in the scope | 2026-11-14 |
| conspiracydjs.files.com | Not in the scope | 2026-11-14 |
| consul.files.comtools | Not in the scope | 2026-11-14 |
| consultimi.files.com | Not in the scope | 2026-11-14 |
| conversion.files.com | Not in the scope | 2026-11-14 |
| convert.files.com | Not in the scope | 2026-11-14 |
| www.convert.files.com | Not in the scope | 2026-11-14 |
| cookandboardman.files.com | Not in the scope | 2026-11-14 |
| coralwest.files.com | Not in the scope | 2026-11-14 |
| corp.files.cominternal | Not in the scope | 2026-11-14 |
| corpaxe.files.com | Not in the scope | 2026-11-14 |
| corr.files.com | Not in the scope | 2026-11-14 |
| cortextech.files.com | Not in the scope | 2026-11-14 |
| countyofsan.files.com | Not in the scope | 2026-11-14 |
| countyofslo.files.com | Not in the scope | 2026-11-14 |
| www.govt.court.files.com | Not in the scope | 2026-11-14 |
| cow.files.com | Not in the scope | 2026-11-14 |
| cp.files.com | Not in the scope | 2026-11-14 |
| cpanel.files.comadmin | Not in the scope | 2026-11-14 |
| cpi.files.com | Not in the scope | 2026-11-14 |
| cpm-int.files.com | Not in the scope | 2026-11-14 |
| cpr-rm.files.com | Not in the scope | 2026-11-14 |
| cps.files.com | Not in the scope | 2026-11-14 |
| cpscps.files.com | Not in the scope | 2026-11-14 |
| crain.files.com | Not in the scope | 2026-11-14 |
| craptowns.files.com | Not in the scope | 2026-11-14 |
| creditclear.files.com | Not in the scope | 2026-11-14 |
| creditmountain.files.com | Not in the scope | 2026-11-14 |
| creo.files.com | Not in the scope | 2026-11-14 |
| crestlinesummit.files.com | Not in the scope | 2026-11-14 |
| crh.files.com | Not in the scope | 2026-11-14 |
| crisprtx.files.com | Not in the scope | 2026-11-14 |
| crispymtn.files.com | Not in the scope | 2026-11-14 |
| cristcot.files.com | Not in the scope | 2026-11-14 |
| critizr.files.com | Not in the scope | 2026-11-14 |
| crm.files.com | Not in the scope | 2026-11-14 |
| crocker.files.com | Not in the scope | 2026-11-14 |
| cross.files.com | Not in the scope | 2026-11-14 |
| crowe.files.com | Not in the scope | 2026-11-14 |
| crriena.files.com | Not in the scope | 2026-11-14 |
| crsinsight.files.com | Not in the scope | 2026-11-14 |
| cruiselines.files.com | Not in the scope | 2026-11-14 |
3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.