Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,362,283
Community Members
 
Community Events
168
Community Groups

How Secure are Your Atlassian Marketplace Apps?

Do you know how secure your Atlassian Marketplace apps are? Our team created this Atlassian Marketplace application security guide to show the difference in application security levels, and what it means for an application to earn Cloud Fortified status. 

atlassian-marketplace-trust-program-levels.png

Security Requirements for All Cloud Applications 

  • An application must authenticate and authorize every request on all endpoints exposed. 
  • Any Atlassian End User Data stored by an application outside of the Atlassian product or users’ browser must ensure full disk encryption at-rest. 
  • An application must use TLS version 1.2 (or higher) to encrypt all of its traffic, and enable HSTS with a minimum age of one year. 
  • An application must not collect or store credentials belonging to Atlassian user accounts such as user passwords or user API tokens. 

security-requirements-all-cloud-apps.png

Cloud Fortified Apps

Cloud fortified apps offer additional security, reliability, and support through:

  • Cloud security participation  
    • Bug Bounty program
    • Security self-assessment program 
  • Reliability checks 
  • 24hr support response time

Cloud-fortified-apps.png

You can identify cloud fortified apps on the marketplace with “Cloud Fortified” badges. 🏰

identify-cloud-fortified-apps.png

Psst: If you’re looking for a secure way to merge your Git data with Jira, Git Integration for Jira is Cloud Fortified and an Atlassian Ecosystem Staff Pick! 

0 comments

Comment

Log in or Sign up to comment
TAGS

Atlassian Community Events