SBOM for Confluence

[Shea McNama]

Afternoon all,

I am trying to get a current copy of the SBOM without having to install the software, I am working on vetting the software at the moment and needing this data.

[Trudy Claspill · Accepted solution]

Hello @Shea McNama 

Welcome to the Atlassian community.

Does this concern the self-hosted product (Confluence Data Center) or the Software-as-a-service product (Confluence Cloud)?

As per this documentation the Data Center products have entered End Of Life. Sale of licenses for these products to new customers was halted on 30 March 2026. If you are a potentially new customer for Confluence Data Center and do not have the license purchase in progress, you may no longer be able to purchase such a license.

If this concerns Confluence Cloud then that is offered as a service and you will not have any software installed in order to use that product, so there is no SBOM.

[Shea McNama]

For the SAAS Service.

[Aron Gombas _Midori_]

AFAIK Atlassian does not currently publish a ready-to-download SBOM file for Confluence Cloud in a standard format like SPDX or CycloneDX.

I think the best you can do is that you contact Atlassian directly by raising a request through Atlassian Support or your account team. For enterprise/procurement vetting purposes, Atlassian's security team can sometimes provide dependency and component information under NDA or as part of a security review process.