Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
hexwvm926-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexygj553-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexygs582-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexyjc898-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzbj566-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzch553-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzcp936-hx-webui-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzgc592-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexzhg748-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzmh937-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzns488-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzrv634-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzsb383-hx-webui-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzsb383-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexzwq254-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hxav01-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hxav02-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hxav03-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
int.helix.apps.fireeye.comNot in the scope2026-11-14
ajay001-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
endpt-5368-hxdmz-ssh.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexbwc355-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexckp634-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexfqf758-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexfst759-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexgyw676-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexmsp556-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexncc01-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexpen001-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexpen002-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexrry584-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexscott002-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hexskr353-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
hextjv956-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
irdev01-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
irdev03-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
qa-yabdi-01-hxdmz.int.helix.apps.fireeye.comtestNot in the scope2026-11-14
schx189-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
schx193-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
scott02-hxdmz-ssh.int.helix.apps.fireeye.comNot in the scope2026-11-14
scottbeta010-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
scottint01-hxdmz-ssh.int.helix.apps.fireeye.comNot in the scope2026-11-14
stap-6663-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
thess01-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
vthomas01-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
yabdihx01-hxdmz-ssh-1.int.helix.apps.fireeye.comNot in the scope2026-11-14
irgmzz9227-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
irgngw6793-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
irjpjc5972-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
irngdr2832-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
irqbdh5225-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
irqfvr5228-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
heybikes-com-au.mail.protection.outlooh-1.helix.apps.fireeye.commailNot in the scope2026-11-14
irodre.part.helix.apps.fireeye.comNot in the scope2026-11-14
hexagonuserconelix.apps.fireeye.comNot in the scope2026-11-14
hexsigelix.apps.fireeye.comNot in the scope2026-11-14
heyaclix.apps.fireeye.comNot in the scope2026-11-14
hipprd02-us-031.hip.apps.fireeye.comNot in the scope2026-11-14
i.apps.fireeye.comNot in the scope2026-11-14
tap-var-dev.i.apps.fireeye.comdevNot in the scope2026-11-14
iam.apps.fireeye.comauthNot in the scope2026-11-14
api-docs-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-feiam-qa.iam.apps.fireeye.comapi, auth, testNot in the scope2026-11-14
api-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-gw-poc.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console-feiam-dev00-gc.iam.apps.fireeye.comadmin, auth, devNot in the scope2026-11-14
console-feiam-qa00.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
console-feiam-stg00-gc.iam.apps.fireeye.comadmin, auth, stagingNot in the scope2026-11-14
api.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
console.feiam-dev00.iam.apps.fireeye.comadmin, auth, devNot in the scope2026-11-14
idp.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
notification.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
schema.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
api.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console.feiam-prd00.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
idp.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
notification.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
feiam-qa00-es-cluster.iam.apps.fireeye.comauthNot in the scope2026-11-14
grafana-int.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ap.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ca.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-eu.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-us.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-qa.iam.apps.fireeye.comauth, monitoring, testNot in the scope2026-11-14
grafana-stg.iam.apps.fireeye.comauth, monitoring, stagingNot in the scope2026-11-14
idp-feiam-dev00-gc.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
idp-feiam-qa00.iam.apps.fireeye.comauthNot in the scope2026-11-14
idp-feiam-stg00-gc.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-prod.iam.apps.fireeye.comauthNot in the scope2026-11-14
log-ingest-prod-server.iam.apps.fireeye.comauthNot in the scope2026-11-14
log-ingest-stg.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-stg-server.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-test.iam.apps.fireeye.comauth, testNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.