App Security Transparency Page

Atlassian’s Security Bug Fix Policy for Marketplace Apps requires apps to meet vulnerability due dates reported in Atlassian Marketplace Security (AMS). Failure to meet vulnerability due dates in AMS may result in either temporary or permanent enforcement. Our comprehensive policy is outlined here on this page: Security Bug Fix Policy.

In addition to enforcement, and in honor of Atlassian’s ‘open company, no bullshit’ value, we update this Transparency Page about every two weeks. This Transparency Page publicly discloses apps that are not adhering to Atlassian’s Security Bug Fix Policy for Marketplace Apps, and who are subject to Marketplace enforcement.

This Transparency Page only lists apps that are currently hidden from Atlassian’s Marketplace, and that have a vulnerability that has existed for more than 90 days. Hiding an app hides the app from the Atlassian Marketplace User Interface and the Atlassian Universal Plugin Manager. New customers cannot install the app. To fully understand when Atlassian hides apps, reference our Security Bug Fix Policy.

For more information regarding an app’s status, contact the app owner. Atlassian does not disclose additional information regarding the app’s status, or their current security vulnerabilities.

List of hidden apps and have a vulnerability for more than 90 days