Griffin Jones Atlassian Team

Scale Rovo adoption across your org with AI Access Controls Every organization is on a different AI adoption journey. While some are ready to make AI broadly available, others need the flexibility to roll it out in phases or limit access to specific groups. Regardless of rollout approach, as AI becomes a bigger part of…

Hey! My name is Griffin, and I'm a Product Manager here at Atlassian and I’ve been partnering with Rovo customers to better understand their requests for more data around Rovo adoption! We want to give customers like you deeper visibility into how Rovo is being used today, so you can get even more value in the future.…

We recently updated and posted our Statement of Applicability for our products to our compliance FAQ. Please see: https://www.atlassian.com/trust/compliance/compliance-faq

Atlassian just updated our cloud architecture diagram to better address some of the questions our customers have. Atlassian Cloud Architecture Diagram

Check out how Atlassian approachs the software development lifecycle (SDLC.)

Early in 2021, Check Point Research provided Atlassian with the details of several vulnerabilities affecting a limited number of web applications that Atlassian uses to support customers and partners. The reported vulnerabilities did not affect Atlassian Cloud products (like Jira, Confluence, or Bitbucket Cloud) or…

Read on to learn more about how our security team invests in building more secure products with Bugcrowd. https://view.highspot.com/viewer/600af756a4dfa049ebddd15c

On December 8, security vendor FireEye disclosed that “a highly sophisticated state-sponsored adversary stole FireEye Red Team tools” and then on December 13, FireEye uncovered “a supply chain attack trojanizing SolarWinds Orion business software updates in order to distribute malware.“ We have conducted an investigation…

Interested in learning more about one of our recent acquisitions security program? Check out Halp's CAIQ document on the Cloud Security Alliance website! https://cloudsecurityalliance.org/star/registry/atlassian

In the Community Leader sentiment survey, 97% of you said security is a very or extremely important factor when choosing software. So, we're bringing you an update on cloud security and other perceived cloud blockers from the Atlassian Trust team that owns the Atlassian Trust Center. The team will give you a behind the…

Hi everyone, We just launched our product security pages, the intention here is to highlight the different security features of each product, their compliance certifications and penetration testing results. Enjoy! https://www.atlassian.com/software/jira/align/security…

Check out Adrian! Bad actors attack a new web application every 39 seconds. Even with so much of the world on pause in a time of unprecedented change and uncertainty, cybercrime continues to thrive. But rivaling these forces is a group of security researchers and ethical hackers that work against these bad actors for the…

Atlassian recently explored the strategic, legal, and social nuances of vulnerability disclosure programs (VDPs) with Bugcrowd. In an interview with some of our top security engineers we discuss why every organization needs a VDP and best practice for managing a VDP. Check out:…

What is it? When considering the term “risk,” most people usually associate it with “What could go wrong?”. While generally true and rooted in evolutionary cognitive bias, this is only part of the definition. According to ISO31000, risk is “effect of uncertainty on objectives”. Therefore, when we talk about risk we should…

Atlassian’s Trust team has recently completed the CyberGRX assessment to provide an additional mechanism for our customers to request information about our security practices and program from our team. CyberGRX is a leader in vendor risk management and works with companies like ADP, AETNA, and Blackstone. Many of our field…

There is a lot happening in our ecosystem right now...Check it out! https://www.atlassian.com/blog/add-ons/cloud-ecosystem-security

A crowdsourced approach A bug bounty program is one of the most powerful post-production tools you can implement to help detect vulnerabilities in your applications and services. Crowdsourcing vulnerability discovery augments the skills of your team by providing access to a skilled pool of security researchers. The…

Securing Third Party Apps Atlassian leads by example with a thriving Marketplace ecosystem that enable our customers to unleash the potential of every team. As such, we are responsible for providing a secure platform and also making sure that our marketplace apps are properly screened and scanned for security…

Atlassian Rules For Security Testing Of Cloud Products Atlassian customers may carry out security assessments against their Atlassian Cloud Products (as defined below) without prior approval. The term “security assessment” refers to any activity intended to determine, evaluate or test the security features and controls of…