Trust & Security

We maintain an always on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third-party that...

Bill Marriott started a discussion 4 2 October 13, 2020

Check out Adrian! Bad actors attack a new web application every 39 seconds. Even with so much of the world on pause in a time of unprecedented change and uncertainty, cybercrime continues to thrive...

Griffin Jones started a discussion 2 0 October 7, 2020

We have re-certified for Payment Card Industries (PCI) for all of our major products.  Specifically, we achieved certification for Jira, Confluence, Bitbucket and LearnDot as they use the...

Guy started a discussion 7 0 September 30, 2020

We are Jira and Confluence cloud users and are evaluating migrating from an on-premise Git hosting solution to BitBucket cloud. Atlassian's Security practices page states "Bitbucket does not offer en...

Kyle started a discussion 0 2 September 29, 2020

Hi, My name Mark, and as the operation manager, Compliance and Risk are now my main priorities.   My goal is to feed data from our processes, into our controls an then get a single view. Mar...

Mark Higgins started a discussion 1 2 September 25, 2020

Hi group   I've been asked to check if Jira is hosted on uk soil only or if such an option exists?   Regards Chris

Christopher started a discussion 3 7 September 25, 2020

Cybersecurity has dominated news headlines over the past few weeks, and has become more prominent due to the COVID pandemic. Whether it is a social media app, leading telecommunications provider or e...

Jodie Vlassis started a discussion 3 0 September 20, 2020

Atlassian successfully held our very first virtual #TeamSecCon event! We had a huge audience come and listen to our awesome speakers and panel group! We had exciting key note speaker...

Jodie Vlassis started a discussion 2 0 August 30, 2020

The Trust & Security team is very excited to announce that Atlassian now hold company corporate partnerships with a range of industry affiliates! We are now officially and formally partnered wi...

Jodie Vlassis started a discussion 2 0 August 17, 2020

Is there a place I can find a list of Atlassian Cloud Security Incidents in the past 24 months?

Darcy started a discussion 1 2 August 13, 2020

Atlassian recently explored the strategic, legal, and social nuances of vulnerability disclosure programs (VDPs) with Bugcrowd. In an interview with some of our top security engineers we discuss...

Griffin Jones started a discussion 2 1 August 13, 2020

Atlassian maintains submissions to the Cloud Security Alliance (CSA) STAR Registry for our major Cloud Services. The STAR Registry hosts the Consensus Assessment Initiative Questionnaire (CAIQ), whic...

Bill Marriott started a discussion 5 0 July 26, 2020

SOC 2 Overview SOC Reports are independent third-party examination reports that provide detailed information and assurance about controls in place at service organizations. Refer to the AICP...

Victoria started a discussion 6 1 July 15, 2020

We recently updated our Security Bug Fix Policy to reflect our current vulnerability resolution timeframes.  Most notably, we have shortened the time frame in which we aim to address all se...

Colin Xu started a discussion 6 1 July 13, 2020

We maintain an always on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third-party that...

Bill Marriott started a discussion 2 0 July 13, 2020

Hi Team :) I worked a year on security and now I am at Select Support at Atlassian. I have knowledge of web app security, IPS, IDS, devsecops, and some other cool sec stuff.   Please let...

Fabiano Martins started a discussion 4 8 June 30, 2020

We recently updated and posted our Statement of Applicability for our products to our compliance FAQ.     Please see: https://www.atlassian.com/trust/compliance/compliance-faq

Griffin Jones started a discussion 2 15 June 9, 2020

Hi all,   Out of the JIRA Cloud service and BitBucket, can these services be or are they ITAR + NIST 800-171 compliant? As far as I know BitBucket cloud at least does not leave the United Stat...

Elias Moya started a discussion 11 29 June 3, 2020

Hello Team, Due to a compliance requirement, we had to share Pen Test report of Jira (Atlassian Bugcrowd 2019 Q4). Now we need a statement from you stating Vulnerabilities mentioned in this specifi...

Philip Choudhury started a discussion 0 3 May 26, 2020

...omplete out in order for us to share our documentation.As of right now access is limited to the Trust team and all requests for documentation will be routed to us for approval. In true Atlassian spirit w...

Griffin Jones started a discussion 2 0 May 22, 2020

Update Jun 22: Thanks to everyone who got in touch! This call for participation is now closed. --- Hi Security and Risk group! I'm Roger, a Product Manager at Atlassian. If you or your colleagu...

Roger Barnes started a discussion 2 0 May 21, 2020

Hi, I have read that JIRA Cloud is not HIPAA compliant yet, but what about JIRA Server? (specifically Jira Service Desk)   Thanks, Nicolas

Nicolas Khoury started a discussion 1 2 May 11, 2020

Hello Security Trust Community! I am happy to announce we have produced and published the Atlassian Sustainability Report 2020! Privacy & Security have been identified as ...

Jodie Vlassis started a discussion 1 2 April 22, 2020

Hello everyone, hope everyone is doing well!! I'm Soumyadeep Mandal or you can call me SaM! I'm an Atlassian user since last couple of years and I'm from Kolkata, India.&nbs...

Soumyadeep Mandal started a discussion 24 8 April 22, 2020

We maintain an always on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third-party that...

Bill Marriott started a discussion 9 1 April 20, 2020