Skip to content
Connect AISign inSign up free

Bug bounty program

TR

Trellix

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Root
Scope:In scope
Name suggests
First seen
Text fileClear filters1,401 names
Subdomains of Trellix
NameScopeFirst seen
argocd.ayldp.skyhighsecurity.comciIn scope2026-11-14
docker-infra.ayldp.skyhighsecurity.comtoolsIn scope2026-11-14
iam-qiblade.ayldp.skyhighsecurity.comauthIn scope2026-11-14
www.iam-qiblade.ayldp.skyhighsecurity.comauthIn scope2026-11-14
careers.skyhighsecurity.comIn scope2026-11-14
www.careers.skyhighsecurity.comIn scope2026-11-14
email.skyhighsecurity.comIn scope2026-11-14
explore.skyhighsecurity.comIn scope2026-11-14
globalvpn.skyhighsecurity.comIn scope2026-11-14
hopper.skyhighsecurity.comIn scope2026-11-14
hopper-stage.skyhighsecurity.comstagingIn scope2026-11-14
partnerportal-dev.skyhighsecurity.comdevIn scope2026-11-14
www.partnerportal-dev.skyhighsecurity.comdevIn scope2026-11-14
partnerportal-qa.skyhighsecurity.comtestIn scope2026-11-14
www.partnerportal-qa.skyhighsecurity.comtestIn scope2026-11-14
partners.skyhighsecurity.comIn scope2026-11-14
partners-stg-login.skyhighsecurity.comauth, stagingIn scope2026-11-14
www.partners.skyhighsecurity.comIn scope2026-11-14
partnersso.skyhighsecurity.comIn scope2026-11-14
qa.partnersso.skyhighsecurity.comtestIn scope2026-11-14
stg.partnersso.skyhighsecurity.comstagingIn scope2026-11-14
pdt.skyhighsecurity.comIn scope2026-11-14
pdtqa.skyhighsecurity.comIn scope2026-11-14
o3.ptr1572.skyhighsecurity.comIn scope2026-11-14
o2.ptr1853.skyhighsecurity.comIn scope2026-11-14
reference-qa.skyhighsecurity.comtestIn scope2026-11-14
resources.skyhighsecurity.comIn scope2026-11-14
skyhighsecurity-uat.skyhighsecurity.comtestIn scope2026-11-14
www.skyhighsecurity-uat.skyhighsecurity.comtestIn scope2026-11-14
smetrics.skyhighsecurity.comIn scope2026-11-14
sse-uat.skyhighsecurity.comtestIn scope2026-11-14
www.sse-uat.skyhighsecurity.comtestIn scope2026-11-14
sso.skyhighsecurity.comauthIn scope2026-11-14
staging.skyhighsecurity.comstagingIn scope2026-11-14
static.skyhighsecurity.comIn scope2026-11-14
status.skyhighsecurity.commonitoringIn scope2026-11-14
success.skyhighsecurity.comIn scope2026-11-14
successtest.skyhighsecurity.comIn scope2026-11-14
trust.skyhighsecurity.comIn scope2026-11-14
de-pav-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
in-ban-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
www.skyhighsecurity.comIn scope2026-11-14
550c.trellix.comIn scope2026-11-14
550d.trellix.comIn scope2026-11-14
550g.trellix.comIn scope2026-11-14
www.550g.trellix.comIn scope2026-11-14
550int.trellix.comIn scope2026-11-14
www.550int.trellix.comIn scope2026-11-14
550l.trellix.comIn scope2026-11-14
550p.trellix.comIn scope2026-11-14
550q.trellix.comIn scope2026-11-14
550u.trellix.comIn scope2026-11-14
academy.trellix.comIn scope2026-11-14
www.academy.trellix.comIn scope2026-11-14
account.trellix.comIn scope2026-11-14
agentm.trellix.comIn scope2026-11-14
agentm-dr.trellix.comIn scope2026-11-14
www.agentm-dr.trellix.comIn scope2026-11-14
agentm-uat.trellix.comtestIn scope2026-11-14
agile.trellix.comIn scope2026-11-14
agilefile.trellix.comIn scope2026-11-14
dev.urlcat.amq.trellix.comdevIn scope2026-11-14
www.dev.urlcat.amq.trellix.comdevIn scope2026-11-14
prod.urlcat.amq.trellix.comIn scope2026-11-14
www.prod.urlcat.amq.trellix.comIn scope2026-11-14
api.soc.ap-south-1.trellix.comapiIn scope2026-11-14
ui.soc.ap-south-1.trellix.comIn scope2026-11-14
api.soc.ap-southeast-2.trellix.comapiIn scope2026-11-14
ui.soc.ap-southeast-2.trellix.comIn scope2026-11-14
api-files.trellix.comapi, dataIn scope2026-11-14
saaspartner.api.trellix.comapiIn scope2026-11-14
uam.api.trellix.comapiIn scope2026-11-14
preprod.uam.api.trellix.comapi, stagingIn scope2026-11-14
www.preprod.uam.api.trellix.comapi, stagingIn scope2026-11-14
trellix-iam.qa.uam.api.trellix.comapi, auth, testIn scope2026-11-14
www.trellix-iam.qa.uam.api.trellix.comapi, auth, testIn scope2026-11-14
staging.uam.api.trellix.comapi, stagingIn scope2026-11-14
www.staging.uam.api.trellix.comapi, stagingIn scope2026-11-14
www.uam.api.trellix.comapiIn scope2026-11-14
apigee.trellix.comIn scope2026-11-14
apigee-dev.trellix.comdevIn scope2026-11-14
apigee-qa.trellix.comtestIn scope2026-11-14
arc-ai1.trellix.comIn scope2026-11-14
arc-ai1-portal.trellix.comIn scope2026-11-14
preprod.arc-ai1.trellix.comstagingIn scope2026-11-14
www.preprod.arc-ai1.trellix.comstagingIn scope2026-11-14
qa.arc-ai1.trellix.comtestIn scope2026-11-14
www.arc-ai1.trellix.comIn scope2026-11-14
arc1-ai1.trellix.comIn scope2026-11-14
artifactory.trellix.comtoolsIn scope2026-11-14
artifactory-dev.trellix.comdev, toolsIn scope2026-11-14
www.artifactory-dev.trellix.comdev, toolsIn scope2026-11-14
artifactory-stage.trellix.comstaging, toolsIn scope2026-11-14
www.artifactory-stage.trellix.comstaging, toolsIn scope2026-11-14
www.artifactory.trellix.comtoolsIn scope2026-11-14
assessments.trellix.comIn scope2026-11-14
www.assessments.trellix.comIn scope2026-11-14
atdupdate.trellix.comIn scope2026-11-14
www.atdupdate.trellix.comIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated