Jira

DisponibleDéveloppeur

Connecteur Jira — lecture seule, sans agent

Audits your Jira Cloud site — public projects and "Anyone on the web" filters/dashboards, admin sprawl and dormant users, permission schemes that grant sensitive actions to everyone, missing issue-security on security-labeled projects, insecure webhooks, unrecognized write-scoped apps, and automation rules that post data externally. Read-only.

Connecter Jira ← Retour à tous les connecteurs

Ce que nous analysons

Projects and their visibility, permission schemes, issue-security schemes, workflows, webhooks, connected apps and scopes, automation rules, shared filters/dashboards, and the user directory (never record data)
Only the labels and identifiers of security-tagged issues, to flag exposure — never issue bodies or credentials

Surveillance en lecture seule — rien dans vos données Jira ne change, sauf si vous activez la remédiation automatique et accordez séparément un accès en écriture.

Avant de vous connecter

• A Jira / site admin who can authorize 8200.dev via Atlassian OAuth (3LO)
• A Jira Cloud site (the connector reads via api.atlassian.com)

Première analyse type : 1–4 minutes depending on site size

Autorisations demandées

read:jira-workRead projects, project visibility, permission schemes, issue-security schemes, webhooks, automation rules, and the labels/security levels of issues — the access + configuration surface. Never issue contents; never write.
read:jira-userRead the user directory (display name, account type, active state) to distinguish members from portal customers and external guests and to flag admin sprawl and dormant accounts — the internal/external boundary.
offline_accessObtain a refresh token so the Connector Health Daemon can keep the read-only connection alive without re-prompting an admin — never grants any additional data access.

Détections de sécurité

15 règles de détection s'exécutent à chaque analyse Jira. Chaque détection est accompagnée d'une explication en langage clair, des preuves associées et des étapes de remédiation.

CRITICALPublic exposure
Jira project is publicly visible
CRITICALPublic exposure
Jira filter or dashboard shared with "Anyone on the web"
HIGHMisconfig
Sensitive Jira project has no Issue Security Scheme
HIGHOver permission
Jira permission scheme grants a sensitive action to everyone
HIGHMisconfig
Jira webhook posts to a non-HTTPS endpoint
HIGHOver permission
Too many Jira administrators
MEDIUMExternal access
External user can access a sensitive Jira project
MEDIUMPublic exposure
Jira Service Management portal is public
MEDIUMMisconfig
Security-labeled Jira workflow has no approval step
MEDIUMShadow it
Unrecognized write-scoped app is connected to Jira
MEDIUMShadow it
Jira automation rule posts to an external URL
MEDIUMOver permission
Sensitive Jira issues are visible to all project members
MEDIUMMisconfig
Vendor AI-training data-contribution posture
LOWStale access
Stale (long-inactive) Jira user
LOWPublic exposure
Attachments exposed on a public Jira project

Comment connecter Jira

Étape 1
Inscrivez-vous ou connectez-vous à 8200.dev
Étape 2
Rendez-vous dans Connecteurs → Jira
Étape 3
Cliquez sur Connecter et autorisez via l'écran de consentement de Jira
Étape 4
8200.dev analyse automatiquement — les résultats apparaissent en quelques minutes

Connectez votre première source en quelques minutes — gratuit, lecture seule, sans appel commercial.

Connecter Jira Voir les 23 connecteurs →