Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
api-neptune.datalake.fireeye.comapiNot in the scope2026-11-14
api-neptune-qa.datalake.fireeye.comapi, testNot in the scope2026-11-14
api-neptune-stage.datalake.fireeye.comapi, stagingNot in the scope2026-11-14
dc-005b37c400b2.fireeye.comNot in the scope2026-11-14
dc-813f17c3fbd1.fireeye.comNot in the scope2026-11-14
dc-a6b9a0c3c6b2.fireeye.comNot in the scope2026-11-14
dc-d12de98dc1a0.fireeye.comNot in the scope2026-11-14
dc-f6b3c5250f9b.fireeye.comNot in the scope2026-11-14
design.fireeye.comNot in the scope2026-11-14
docs-portal.design.fireeye.comNot in the scope2026-11-14
odyssey.design.fireeye.comNot in the scope2026-11-14
cdn-prod.odyssey.design.fireeye.comNot in the scope2026-11-14
dev.fireeye.comdevNot in the scope2026-11-14
dev-docs.fireeye.comdevNot in the scope2026-11-14
dev-erp-app.fireeye.comdevNot in the scope2026-11-14
dev-identity.fireeye.comauth, devNot in the scope2026-11-14
dev-idp.fireeye.comauth, devNot in the scope2026-11-14
www.dev-idp.fireeye.comauth, devNot in the scope2026-11-14
dev-learn.fireeye.comdevNot in the scope2026-11-14
dev-timetracker.fireeye.comdevNot in the scope2026-11-14
dev-unifiedid.fireeye.comdevNot in the scope2026-11-14
www.dev-unifiedid.fireeye.comdevNot in the scope2026-11-14
registry.dev.fireeye.comdev, toolsNot in the scope2026-11-14
dev1.fireeye.comdevNot in the scope2026-11-14
dev1-identity.fireeye.comauth, devNot in the scope2026-11-14
dev63.fireeye.comdevNot in the scope2026-11-14
developer.fireeye.comNot in the scope2026-11-14
developers.fireeye.comNot in the scope2026-11-14
dialin.fireeye.comNot in the scope2026-11-14
dispatcher1.fireeye.comNot in the scope2026-11-14
dispatcher2.fireeye.comNot in the scope2026-11-14
docs.fireeye.comNot in the scope2026-11-14
docs-iam-int.fireeye.comauthNot in the scope2026-11-14
docs-iam-stg.fireeye.comauth, stagingNot in the scope2026-11-14
dev.docs.fireeye.comdevNot in the scope2026-11-14
www.docs.fireeye.comNot in the scope2026-11-14
docs2.fireeye.comNot in the scope2026-11-14
dod.fireeye.comNot in the scope2026-11-14
download.fireeye.comNot in the scope2026-11-14
download-beta.fireeye.comstagingNot in the scope2026-11-14
download-qa.fireeye.comtestNot in the scope2026-11-14
download-stage.fireeye.comstagingNot in the scope2026-11-14
download-staging.fireeye.comstagingNot in the scope2026-11-14
download6-qa.fireeye.comtestNot in the scope2026-11-14
dpany-pc.fireeye.comNot in the scope2026-11-14
drop.fireeye.comNot in the scope2026-11-14
www.drop.fireeye.comNot in the scope2026-11-14
dtitap.fireeye.comNot in the scope2026-11-14
dtitap-prod.fireeye.comNot in the scope2026-11-14
dtitap-stage.fireeye.comstagingNot in the scope2026-11-14
duong.fireeye.comNot in the scope2026-11-14
dx-components.fireeye.comNot in the scope2026-11-14
eastcoastcas.fireeye.comNot in the scope2026-11-14
education.fireeye.comNot in the scope2026-11-14
edulabs.fireeye.comNot in the scope2026-11-14
selab.emea.fireeye.comNot in the scope2026-11-14
emerginged.fireeye.comNot in the scope2026-11-14
afoley.endpoint.fireeye.comNot in the scope2026-11-14
ahmaden.endpoint.fireeye.comNot in the scope2026-11-14
alpha.endpoint.fireeye.comstagingNot in the scope2026-11-14
alpha01.endpoint.fireeye.comstagingNot in the scope2026-11-14
alpha02.endpoint.fireeye.comstagingNot in the scope2026-11-14
amir.endpoint.fireeye.comNot in the scope2026-11-14
andreis.endpoint.fireeye.comNot in the scope2026-11-14
apollo.endpoint.fireeye.comNot in the scope2026-11-14
atlas.endpoint.fireeye.comNot in the scope2026-11-14
beta01.endpoint.fireeye.comstagingNot in the scope2026-11-14
ciaranwhyte.endpoint.fireeye.comNot in the scope2026-11-14
dcsibi.endpoint.fireeye.comNot in the scope2026-11-14
dev-vineela.endpoint.fireeye.comdevNot in the scope2026-11-14
dev01.endpoint.fireeye.comdevNot in the scope2026-11-14
dev02.endpoint.fireeye.comdevNot in the scope2026-11-14
devahmadglobal.endpoint.fireeye.comNot in the scope2026-11-14
devaishwaryadeviap.endpoint.fireeye.comNot in the scope2026-11-14
devambarish.endpoint.fireeye.comNot in the scope2026-11-14
devaswin.endpoint.fireeye.comNot in the scope2026-11-14
devbart.endpoint.fireeye.comNot in the scope2026-11-14
devbrajkishor.endpoint.fireeye.comNot in the scope2026-11-14
devglobalsatya.endpoint.fireeye.comNot in the scope2026-11-14
devhiman.endpoint.fireeye.comNot in the scope2026-11-14
devivanbachabi.endpoint.fireeye.comNot in the scope2026-11-14
devkeithw.endpoint.fireeye.comNot in the scope2026-11-14
devkeithwonderly.endpoint.fireeye.comNot in the scope2026-11-14
devkshaw.endpoint.fireeye.comNot in the scope2026-11-14
devops.endpoint.fireeye.comNot in the scope2026-11-14
devprashanth.endpoint.fireeye.comNot in the scope2026-11-14
devriti.endpoint.fireeye.comNot in the scope2026-11-14
devritika.endpoint.fireeye.comNot in the scope2026-11-14
devritz.endpoint.fireeye.comNot in the scope2026-11-14
devsanthosh.endpoint.fireeye.comNot in the scope2026-11-14
devsathish.endpoint.fireeye.comNot in the scope2026-11-14
devshashanka.endpoint.fireeye.comNot in the scope2026-11-14
devsiddharthb.endpoint.fireeye.comNot in the scope2026-11-14
devsivaramsajeev.endpoint.fireeye.comNot in the scope2026-11-14
devsteffey.endpoint.fireeye.comNot in the scope2026-11-14
devui.endpoint.fireeye.comNot in the scope2026-11-14
devvijay.endpoint.fireeye.comNot in the scope2026-11-14
devvikaskumar.endpoint.fireeye.comNot in the scope2026-11-14
devvsevolods.endpoint.fireeye.comNot in the scope2026-11-14
devvsevolodse1.endpoint.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.