Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
hexgwd395-hx-webui-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgwd395-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgzf425-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgzf425-hxdmz-ssh-2.helix.apps.fireeye.comNot in the scope2026-11-14
hexhbt994-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhgf452-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhjy287-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhpb435-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhvz245-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhyk294-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhyq769-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexhzy637-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexistenh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexjbm389-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexjkc685-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexjtd886-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexjwh595-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexkbp627-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexkby989-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexkfr368-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexkpk579-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexksj232-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexkvv499-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexkwk455-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmhb469-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexmkj758-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmmt777-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmpz367-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmsb892-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmwt328-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexmzd975-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexnhf738-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexnkj624-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexnmz662-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexnyf883-hxdmz-agent-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexnyf883-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexocex01.helix.apps.fireeye.comNot in the scope2026-11-14
hexpdv822-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexpfg492-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexpgw322-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexpkp269-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexpmk754-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexpmr563-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexqck497-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqcs666-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqdb268-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqgb435-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqgs995-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqmg694-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqvc553-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqvs559-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqvt323-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqwv493-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexqwz537-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexqyj398-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrcn236-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrdj727-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrff523-hxdmz-agent-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrff523-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrhj426-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrrj724-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrry286-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexryk599-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexrzz289-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsbn796-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsbq946-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexsbz496-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsgs383-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsjb282-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsjb573-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsmn342-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsnd247-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexspn442-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexsqz723-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexthp483-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hextkb829-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hextnm354-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexttd246-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hextvk384-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hextwd227-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hextyf656-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvft228-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvgp723-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvkm998-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvph763-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvwz898-hx-webui-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexvzd983-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexwbf234-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwbj448-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwff477-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwgp859-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwhp848-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwkf852-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwmp834-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwnm978-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwpf438-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwsf442-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwsv389-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexwtc759-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexwtf226-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.