Discussions
-
Bug Bounty January 2025 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
Bug Bounty April 2025 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
Bug Bounty September 2024 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
Bug Bounty July 2024 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
Bug Bounty April 2024 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
July 2022 - June 2023 Annual Bug Bounty Report
Following on from our FY22 Annual Bug Bounty Report, we have updated the FY23 report to reflect a full year of statistics and data about our Bug Bounty Programs as part of our overall Cloud Vulnerability Management Program. The Annual Bug Bounty Report includes statistics and data for the July 2022 to June 2023 timeframe,…
-
Bug Bounty January 2024 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and show that we are actively testing and identifying any…
-
Bug Bounty October 2023 Update
At the start of each quarter, we publish a roll-up report from each of our Bug Bounty programs to give our customers a view of the progress of the program and the vulnerabilities. For many customers, these reports can take the place of a penetration test report and shows that we are actively testing and identifying any…
-
Bug Bounty July 2023 Update
We maintain an always-on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third party that shows that we are testing the security of our own products and services. As part of our commitment to ensuring the highest…
-
New Letters of Assessment now live!
Atlassian primarily relies on our Atlassian Bug Bounty Program and our own internal testing by our Security Engineers to test and identify security issues or vulnerabilities in our Products and Services. We do work with expert security testing companies to test targeted portions of our environment based on new development,…
-
New Letters of Assessment now live!
Atlassian primarily relies on our Atlassian Bug Bounty Program and our own internal testing by our Security Engineers to test and identify security issues or vulnerabilities in our Products and Services. However, on occasion, we do work with expert security testing companies to test targeted portions of our environment…
-
Bug Bounty April 2023 Update
We maintain an always-on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third party that shows that we are testing the security of our own products and services. As part of our commitment to ensuring the highest…
-
Bug Bounty January 2023 Update
We maintain an always-on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third party that shows that we are testing the security of our own products and services. We believe our always-on bug bounty, with more than…
-
New Letters of Assessment now live!
Atlassian primarily relies on our Atlassian Bug Bounty Program and our own internal testing by our Security Engineers to test and identify security issues or vulnerabilities in our Products and Services. However, on occasion, we do work with expert security testing companies to test targeted portions of our environment…
-
Updated HECVAT Response - v3.03 now live!
Atlassian’s Trust team now have now completed an updated response for the Higher Education Cloud Vendor Assessment Toolkit (HECVAT) version 3.03 for our Cloud products. What is HECVAT? The HECVAT is a structured questionnaire for Cloud Vendors to complete detailing many common operational, technical, and organizational…
-
Bug Bounty October 2022 Update
We maintain an always-on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third party that shows that we are testing the security of our own products and services. We believe our always-on bug bounty, with more than…