Skip to content
BackEsc
Connect AISign inSign up free

Atlassian · in scope

Web applications

29 assets in scope

Every dot is an asset the program lists in scope. The first 19 are named here; the program's own page has the full scope.

Connect AI

Open Atlassian on Bugcrowd

Every one of the 29 is a mark on the map. Named now: 1 to 19, as listed first.

  1. https://admin.atlassian.com/atlassian-guardWeb applications
  2. https://admin.atlassian.com/Web applications
  3. https://id.atlassian.com/loginWeb applications
  4. https://start.atlassian.comWeb applications
  5. https://bitbucket.orgWeb applications
  6. https://www.atlassian.com/software/confluenceWeb applications
  7. https://www.atlassian.com/software/confluence/premiumWeb applications
  8. https://www.atlassian.com/software/jira/service-managementWeb applications
  9. https://www.atlassian.com/software/jiraWeb applications
  10. https://www.atlassian.com/software/jira/work-managementWeb applications
  11. https://www.atlassian.com/software/rovoWeb applications
  12. https://www.atlassian.com/software/rovo-devWeb applications
  13. https://marketplace.atlassian.comWeb applications
  14. https://www.atlassian.com/software/atlasWeb applications
  15. https://*.atlastunnel.comWeb applications
  16. Any other *.atlassian.com or *.atl-paas.net domain that cannot be exploited directly from a *.atlassian.net instanceWeb applications
  17. https://www.loom.com/Web applications
  18. https://www.loom.com/downloadWeb applications
  19. https://www.loom.com/downloadWeb applications

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated