Jira

AttivoDeveloper

Connettore Jira — sola lettura, senza agenti

Audits your Jira Cloud site — public projects and "Anyone on the web" filters/dashboards, admin sprawl and dormant users, permission schemes that grant sensitive actions to everyone, missing issue-security on security-labeled projects, insecure webhooks, unrecognized write-scoped apps, and automation rules that post data externally. Read-only.

Collega Jira ← Torna a tutti i connettori

Cosa analizziamo

Projects and their visibility, permission schemes, issue-security schemes, workflows, webhooks, connected apps and scopes, automation rules, shared filters/dashboards, and the user directory (never record data)
Only the labels and identifiers of security-tagged issues, to flag exposure — never issue bodies or credentials

Monitoraggio in sola lettura — nulla nei suoi dati Jira viene modificato a meno che non attivi la correzione automatica e conceda separatamente l'accesso in scrittura.

Prima di collegare

• A Jira / site admin who can authorize 8200.dev via Atlassian OAuth (3LO)
• A Jira Cloud site (the connector reads via api.atlassian.com)

Prima scansione tipica: 1–4 minutes depending on site size

Autorizzazioni richieste

read:jira-workRead projects, project visibility, permission schemes, issue-security schemes, webhooks, automation rules, and the labels/security levels of issues — the access + configuration surface. Never issue contents; never write.
read:jira-userRead the user directory (display name, account type, active state) to distinguish members from portal customers and external guests and to flag admin sprawl and dormant accounts — the internal/external boundary.
offline_accessObtain a refresh token so the Connector Health Daemon can keep the read-only connection alive without re-prompting an admin — never grants any additional data access.

Rilevamenti di sicurezza

15 regole di rilevamento vengono eseguite a ogni scansione di Jira. Ogni rilevamento è accompagnato da una spiegazione in linguaggio semplice, dalle evidenze che lo supportano e dai passaggi di remediation.

CRITICALPublic exposure
Jira project is publicly visible
CRITICALPublic exposure
Jira filter or dashboard shared with "Anyone on the web"
HIGHMisconfig
Sensitive Jira project has no Issue Security Scheme
HIGHOver permission
Jira permission scheme grants a sensitive action to everyone
HIGHMisconfig
Jira webhook posts to a non-HTTPS endpoint
HIGHOver permission
Too many Jira administrators
MEDIUMExternal access
External user can access a sensitive Jira project
MEDIUMPublic exposure
Jira Service Management portal is public
MEDIUMMisconfig
Security-labeled Jira workflow has no approval step
MEDIUMShadow it
Unrecognized write-scoped app is connected to Jira
MEDIUMShadow it
Jira automation rule posts to an external URL
MEDIUMOver permission
Sensitive Jira issues are visible to all project members
MEDIUMMisconfig
Vendor AI-training data-contribution posture
LOWStale access
Stale (long-inactive) Jira user
LOWPublic exposure
Attachments exposed on a public Jira project

Come collegare Jira

Passaggio 1
Registrarsi o accedere a 8200.dev
Passaggio 2
Andare su Connettori → Jira
Passaggio 3
Fare clic su Collega e autorizzare tramite la schermata di consenso di Jira
Passaggio 4
8200.dev esegue la scansione automaticamente — i risultati compaiono in pochi minuti

Connetta la sua prima sorgente in pochi minuti — gratuito, sola lettura, senza chiamata commerciale.

Collega Jira Visualizza tutti i 23 connettori →