Atlassian-Built Apps bug bounty program

Bugcrowd up to $4k 289 in-scope assets managed

Atlassian-Built Apps runs a public bug bounty program hosted on Bugcrowd. The program currently lists 289 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $4k depending on severity.

// example in-scope assets

https://marketplace.atlassian.com/apps/1222147/opsgenie?hosting=cloudhttps://marketplace.atlassian.com/apps/1217110/training-for-jira?hosting=cloudhttps://marketplace.atlassian.com/apps/1217110/training-for-jira?hosting=serverhttps://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official Bugcrowd program page

// more Bugcrowd programs

OpenSea Managed Bug Bounty Program≤ $3.0M Fireblocks MPC Managed Bug Bounty Engagement≤ $150k T-Mobile≤ $134k Tesla≤ $100k SpaceX/Starlink≤ $100k Sophos≤ $80k

// data aggregated from public Bugcrowd listings · refreshed 8/24/2026 · the official program page is authoritative