Report a vulnerability
We love hearing about ways we can improve the security of our products. Our commitment to delivering awesome and secure software for our customers is aided by our researcher community – so thanks in advance! Plus you could get recognized in our Hall of Fame.
Report an incident
Notice a compromise of our products or services? We want to know. We’re committed to responding to security incidents consistently and comprehensively. We’ll always listen and treat your report with respect..
Atlassian Security Hall of Fame
We would like to thank the people who have responsibly disclosed vulnerabilities to us.
Server configuration guides
Using our solutions on the server at your place? Here’s how to set up the security options.
Atlassian Cloud customer? Don’t worry, we’ve done this already!
Security advisories
These advisories are generally just for the server at your place, our Atlassian Cloud is updated automatically.
We release critical Security Advisories on the 3rd Wednesday of the month for Server products. Learn about how & when publish security advisories or about how we determine the severity levels.
July 2016 |
Bamboo |
June 2016 |
Bitbucket Cloud |
May 2016 |
HipChat |
January 2016 |
Bamboo |
December 2015 |
JIRA |
October 2015 |
Bamboo |
August 2015 |
JIRA and HipChat for JIRA plugin |
Previous Security Advisories |
JIRA Confluence Bamboo Stash Fisheye Crucible |
Security policies
We are open and transparent with our program and our security policies to help you understand how we manage our products and services.
Cloud
Security Statement
Our Atlassian Cloud Security Statement details many of the questions that we receive from customers about how we run and secure our Cloud Services.
Security
Bug Fix Policy
Atlassian makes it a priority to ensure that customers’ systems cannot be compromised by exploiting vulnerabilities in Atlassian products.
Security Advisory
Publishing Policy
Our Advisory Publishing Policy
is how we notify customers when a critical security vulnerability in an Atlassian product is discovered and resolved.