About Security

You can check additional security info of our plugins in next links:

Infrastructure

Our plugins are stored at OVH servers

https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/ 



Atlassian

Cloud Security Participant

We are part of the Atlassian Program Cloud Security Participant

https://www.atlassian.com/blog/add-ons/marketplace-cloud-security-participant-badge 

https://marketplace.atlassian.com/categories/app-security-badging

Bug bounty

We have a public bug bounty for our Connectors

https://www.atlassian.com/licensing/marketplace#what-is-the-marketplace-bug-bounty-program 



SonarQube

We analyze each commit of our plugins with last version of SonarQube to validate security, reliability and maintainability

https://www.sonarqube.org/features/security/ 



OWASP Top 10

Thanks to SonarQube, we check  the OWASP Top 10 verification

https://owasp.org/www-project-top-ten/



CWE Top 25

Thanks to SonarQube, we check  the CWE Top 25 verification

https://cwe.mitre.org/top25/archive/2021/2021_cwe_top25.html