Jira
서비스 중개발자Jira 커넥터 — 읽기 전용, 에이전트리스
Audits your Jira Cloud site — public projects and "Anyone on the web" filters/dashboards, admin sprawl and dormant users, permission schemes that grant sensitive actions to everyone, missing issue-security on security-labeled projects, insecure webhooks, unrecognized write-scoped apps, and automation rules that post data externally. Read-only.
스캔 대상
- Projects and their visibility, permission schemes, issue-security schemes, workflows, webhooks, connected apps and scopes, automation rules, shared filters/dashboards, and the user directory (never record data)
- Only the labels and identifiers of security-tagged issues, to flag exposure — never issue bodies or credentials
읽기 전용 모니터링 — 자동 교정을 활성화하고 쓰기 액세스를 별도로 허용하지 않는 한 Jira 데이터는 변경되지 않습니다.
보안 탐지 항목
15개의 탐지 규칙이 모든 Jira 스캔 시 실행됩니다. 각 탐지 항목에는 쉬운 언어로 된 설명, 이를 뒷받침하는 증거, 그리고 조치 단계가 함께 제공됩니다.
- CRITICALPublic exposure
Jira project is publicly visible
- CRITICALPublic exposure
Jira filter or dashboard shared with "Anyone on the web"
- HIGHMisconfig
Sensitive Jira project has no Issue Security Scheme
- HIGHOver permission
Jira permission scheme grants a sensitive action to everyone
- HIGHMisconfig
Jira webhook posts to a non-HTTPS endpoint
- HIGHOver permission
Too many Jira administrators
- MEDIUMExternal access
External user can access a sensitive Jira project
- MEDIUMPublic exposure
Jira Service Management portal is public
- MEDIUMMisconfig
Security-labeled Jira workflow has no approval step
- MEDIUMShadow it
Unrecognized write-scoped app is connected to Jira
- MEDIUMShadow it
Jira automation rule posts to an external URL
- MEDIUMOver permission
Sensitive Jira issues are visible to all project members
- MEDIUMMisconfig
Vendor AI-training data-contribution posture
- LOWStale access
Stale (long-inactive) Jira user
- LOWPublic exposure
Attachments exposed on a public Jira project
Jira 연결 방법
1단계
8200.dev에 가입하거나 로그인하십시오
2단계
커넥터 → Jira(으)로 이동하십시오
3단계
연결을 클릭하고 Jira의 동의 화면을 통해 인증하십시오
4단계
8200.dev가 자동으로 스캔합니다 — 결과는 몇 분 내에 표시됩니다
몇 분 안에 첫 번째 소스를 연결하십시오 — 무료, 읽기 전용, 영업 상담 불필요.