Trust & Security
Created Dec 2, 2020, Last active Jul 7, 2026
-
Hello guys, I am using the Confluence but i do not know which email has the Global Permissions. Since the administrator created the trial and set up everything but now the roles somehow changed with...
-
Gāday everyone and happy 2022! My name is Filiberto Selvas and Iām a Principal Product Manager focused on data management and compliance in highly regulated industries ! At Atlassian, we unde...
-
Overview System and Organization Controls (SOC) Reports are independent third-party examination reports that provide detailed information and assurance about controls in place at service organizati...
-
After the discovery of the vulnerability of version 1.2.17 of Log4j when is Atlassian intending to add the latest version of Log4j as part of the standard on premise installation?
-
On December 9, Atlassian became aware of the vulnerability CVE-2021-44228 - Log4j. Impact on Cloud Products This vulnerability has been mitigated for all Atlassian cloud products previously ...
-
Hi everyone! Thanks to all who joined us for our webinar on Privacy, security, and compliance in Atlassian Cloud. If you missed it or werenāt able to catch the whole thing, you can view t...
-
hi, since the official statement about log4j is pretty brief (not to say lame), i'm looking for answers here. The vulnerability has been disclosed 4 days ago and still Confluence does not give any up...
-
Atlassianās 2020 reporting consisted of 8 SOC 2 reports individually attesting compliance for our cloud products. With each weighing-in at ~90 pages, we saw duplication of content, effort, inconsiste...
-
Hello everyone, How you guys are mitigating Security Vulnerability CVE-2021-42574? I am still unable to understand the risk, impact and mitigation done by Atlassian. Is there any other workaround th...
-
Hey there! If youāre looking for more tips and best practices for protecting your data and using Atlassian products securely and youāre part of the public sector, check out the Atlassian Governmen...
-
Hello! We know that security and data management are top priorities for you, so they remain a top priority for us. Weāve heard from many of you that BYOK (bring your own key) encryption is an importa...
-
Icarus Labs is Atlassian's experimental security research team. Itās inspired by research groups like Google's Project Zero and Facebookās Red Team X (which research new vulnerabilities), but for any...
-
Atlassian Cloud č£½åć®ē®”ēč ć äŗę„ē¶ē¶čØē» (BCP; business continuity planning) ćē«ę”ćććØćć«å½¹ē«ć¤ę å ±ćē“¹ä»ćć¾ćć ā åęē„č ć·ć¹ćć ć«ććę äæććć¦ććå復ę§ćÆ ć¢ćć©ć·ć¢ć³ć«ćć锧客ćć¼ćæć®ē®”ē ććåē §ćć ććć仄éćę¬ēØæć§ćÆåč£½åć®ē®”ēč ćč”ććć¢ćÆć·ć§ć³ćē“¹ä»ćć¾ćć &n...
-
What are Standard Contractual Clauses (SCCs)? OnJun 4, 2021, an updated version of the Standard Contractual Clauses (or SCCs) was published by lawmakers in the European Union (EU) and they gave...
-
Atlassian primarily relies on our Atlassian Bug Bounty Program and our own internal testing by our Security Engineers to test and identify security issues or vulnerabilities ...
-
Weāre excited to announce that Trello has successfully completed their annual FedRAMP security assessment. For those not aware, Trello is now on its second year of having FedRAMP Tailored authorizati...
-
Hi, Last year there was a security program where 73 questions had to be answered through Whistic and a green-yellow-red rating could be obtained. Will this program be continued?
-
Hi, Recently regulators in the EU and US have become more active in trying to prevent fake reviews in marketplaces. For example see https://www.theregister.com/2021/10/14/fake_reviews_ftc/ . The ...
-
Hello. A user of the Atlassian platform uses it to send spam with blackmail and extortion. This user's address is: jira@trans-l3eerf55.atlassian.net Š”Š¼Š¾Š³ŃŃ Š»Šø ŃŃŠŗŠ¾Š²Š¾Š“ŠøŃŠµŠ»Šø Atlassian ŃŠ¾ŃŃŃŠ“Š½ŠøŃŠ°ŃŃ Ń...
-
Atlassian maintains submissions to the Cloud Security Alliance (CSA) STAR Registry for our major Cloud Services. The STAR Registry hosts the Consensus Assessment Initiative Questionnaire (CAIQ), whic...
-
...uestions: What are your tried-and-true security measures or best practices? What are the absolute must-haves / minimum requirement? What is your wishlist security initiative to accomplish? What w...
-
What's the best way to get "pushed" security related announcements from Atlassian? Other vendors have mailing lists you can subscribe to or RSS feeds. Atlassian has a security announcements pa...
-
We have re-certified for Payment Card Industries (PCI) for all of our major products. Specifically, we achieved certification for Jira, Confluence, Bitbucket, Trello, Statuspage, Opsgenie, Ha...
-
We maintain an always on bug bounty to identify and triage issues in our products and services. Many customers ask us for āpenetration reportsā or similar - basically a report from a third-party that...
-
Hi there! Where can I find following info please: Is data encrypted on Jira Cloud? Is encryption done by keys dedicated to the customer? Thank you!
Description
The Trust & Security community group is Atlassian's go-to space for all things Security, Compliance, Privacy and more. This group is to share information, tips, and best practices for protecting your data and using Atlassian products in a secure and reliable way.
Copied to clipboard