Keep your secrets safe by blocking sensitive information such as passwords, public keys, access keys, etc. from being checked into your git repositories
300
Customers have installed this app in at least 300 active instances.
300
Customers have installed this app in at least 300 active instances.
by Soterifor Bitbucket Server 5.3.0 - 7.13.0, Bitbucket Data Center 5.3.0 - 7.13.0 and more versions
Versions available for Bitbucket Server 5.2.0 - 5.2.8
Bitbucket Data Center 5.2.0 - 5.2.8
Bitbucket Data Center 5.2.0 - 5.2.8
Unsupported
This app isn't formally supported.
Supported
Soteri supports this app.
Supported
Soteri supports this app.
Add extra security to your developer workflow. Reject commits that contain passwords, private keys, cloud credentials, etc
Add extra security to your developer workflow. Reject commits that contain passwords, private keys, cloud credentials, etc
Add extra security to your developer workflow. Reject commits that contain passwords, private keys, cloud credentials, etc
Detect and Block Sensitive Commits from Check-in
Gain insight into the security level of Bitbucket
Over 30 Different Patterns Detected & Add Your Own
User our Security Scan Report to see what vulnerabilities exist in each individual Bitbucket Project, repository and branch
Security for Bitbucket Server detects over 30 specific credential and key patterns, like public keys, private keys, passwords, AWS keys, SSH keys and more. You can also add your own patterns using our custom rules page!
Detect and Block Sensitive Commits from Check-in
Gain insight into the security level of Bitbucket
Over 30 Different Patterns Detected & Add Your Own
Keep your secrets safe by blocking sensitive information such as passwords, public keys, access keys, etc. from being checked into your git repositories
User our Security Scan Report to see what vulnerabilities exist in each individual Bitbucket Project, repository and branch
Security for Bitbucket Server detects over 30 specific credential and key patterns, like public keys, private keys, passwords, AWS keys, SSH keys and more. You can also add your own patterns using our custom rules page!
More details
Download now to detect and block users from checking in sensitive information such as passwords, public keys, access keys, etc. Protect your company from this common error that can be exploited by attackers!
✅ Feature highlights:
- Pre-receive hook to reject dangerous pushes
- Repository scanning to analyze previously committed code
- Trigger scans for individual repositories or a whole Bitbucket instance
- Hook can be enabled per repository, per project, or globally
- Built-in rules for many common vulnerabilities, such as ssh keys and API tokens
- Define your own custom scanning rules, globally or on per-repository level
😀 More apps you’ll like:
- Catch sensitive data in Confluence pages with Security for Confluence
More details
Download now to detect and block users from checking in sensitive information such as passwords, public keys, access keys, etc. Protect your company from this common error that can be exploited by attackers!
✅ Feature highlights:
- Pre-receive hook to reject dangerous pushes
- Repository scanning to analyze previously committed code
- Trigger scans for individual repositories or a whole Bitbucket instance
- Hook can be enabled per repository, per project, or globally
- Built-in rules for many common vulnerabilities, such as ssh keys and API tokens
- Define your own custom scanning rules, globally or on per-repository level
😀 More apps you’ll like:
- Catch sensitive data in Confluence pages with Security for Confluence
Reviews for cloud
(7)Sign in to write a reviewThere are no reviews yet. Be the first to review this app.
Reviews for server
(7)Sign in to write a review
Can some one explain the functionality of this plugin how to set the resist parameters in build in this plugin
Vamsina, please reference our documentation here. If it's not clear, you're welcome to open a support request in our portal and we'll help you with your setup.
Plugin is a great addition to our environment. Support for this plug in is exceptional, speedy and easy to work with.
Amazing plugin, easy to install and to configure, do exactly what it propose to do. The technical support is wonderful too.
Nice and easy to install plugin. Will be implementing this for our 500+ developers
Easy to set up. Useful and detects many common security credentials.
Reviews for Data Center
(7)Sign in to write a reviewThere are no reviews yet. Be the first to review this app.
Cloud Pricing
Server Pricing
Data Center Pricing
| 10 users$10 | 25 users$207 | 50 users$380 | 100 users$690 | 250 users$1,380 | 500 & upAdditional pricing details |
| 25 users$207/year | 50 users$380/year | 100 users$690/year | 250 users$1,380/year | 500 users$1,840/year | 1000 & upAdditional pricing details |
Pricing FAQ
- How does server app pricing work?
Server products and apps are hosted on your servers. This app is sold as a perpetual license, and the purchase price includes 12 months of maintenance (support and version updates).
You can renew maintenance after 12 months at 50% of the current purchase price. You can upgrade the tier of your Atlassian product and app licenses at any time. Upgrade prices are calculated based on Atlassian's formula (view example).
If app pricing changes after your initial purchase, there's a 60-day grandfathering period during which you can renew based on the old pricing.
- How do I determine my server pricing?
Apps are billed based on the number of users in your Atlassian product. The app tier should match the licensed user tier of the Atlassian product. For example, if you have a Confluence license for 500 users, you should purchase the 500-user tier for apps. Even if fewer users want to use the app than your Atlassian product license, the two licenses should match exactly.
- Can I install this app in a Data Center product?
Yes, this app has a Data Center approved version. If you're using a Data Center product, you should install the Data Center version of the app.
- What type of license do I need if I'm using this app in a Data Center product?
Because this app has a Data Center approved version, you should purchase a Data Center license for the app.
If you already own a server license for this app, you can continue using the server license in your Data Center product for a limited period of time.
- Do you offer academic, community, or open-source licenses for server apps?
For server apps, academic licenses are available at a 50% discount if you have an academic license for your Atlassian product.
Community and open-source licenses are available for server apps. Learn more about community and open source licenses.
- Can I extend my free trial?
For server apps, you can extend your app trial up to 5 times - in other words, for up to six months. Extend your trial by generating a new evaluation license key from Atlassian Marketplace. Click Try it free and you'll be directed to generate a new license. Paste this license key into the app listing in UPM from your Atlassian product, and you're all set.
- How can I buy apps for my legacy Jira Server or Confluence Server license?
If you own a legacy Jira Server Unlimited (100+ users) or Confluence Server Unlimited (2000+ users) license purchased in 2012 or earlier, legacy app pricing is no longer available. You have two options for app purchasing:
- Purchase the app at the non-legacy Unlimited (10000+ users) tier.
- Renew your Jira or Confluence license at a non-legacy tier, then purchase the app at the same tier.
Pricing FAQ
- How does Data Center app pricing work?
Data Center apps are sold as an annual subscription. You are eligible for support and version updates as long as your subscription is active.
If app pricing changes after your initial purchase, there's a 60-day grandfathering period during which you can renew based on the old pricing.
- How do I determine my Data Center pricing?
Apps are billed based on the number of users in your Atlassian product. The app tier should match the licensed user tier of the Atlassian product. For example, if you have a Confluence license for 500 users, you should purchase the 500-user tier for apps. Even if fewer users want to use the app than your Atlassian product license, the two licenses should match exactly.
- Can I install this app in a Data Center product?
Yes, this app has a Data Center approved version. If you're using a Data Center product, you should install the Data Center version of the app.
- What type of license do I need if I'm using this app in a Data Center product?
Because this app has a Data Center approved version, you should purchase a Data Center license for the app.
If you already own a server license for this app, you can continue using the server license in your Data Center product for a limited period of time.
- Do you offer academic, community, or open-source licenses for Data Center apps?
For Data Center apps, academic licenses are available at a 50% discount if you have an academic license for your Atlassian product.
Community and open-source licenses are not available for Data Center apps. Learn more about community and open source licenses.
- Can I extend my free trial?
For Data Center apps, you can extend your app trial up to 5 times - in other words, for up to six months. Extend your trial by generating a new evaluation license key from Atlassian Marketplace. Click Try it free and you'll be directed to generate a new license. Paste this license key into the app listing in UPM from your Atlassian product, and you're all set.
Soteri provides support for this app.
Soteri provides support for this app.
Vendor support resources
Documentation
Find out how this app works.
Vendor support resources
Documentation
Find out how this app works.
Versions
Version 2.2.0 • Bitbucket Server 5.3.0 - 7.13.0 • Released 2021-05-27
Summary
Allow developers to view the repository-level scan reports
Details
- SOTERIA-176 -- Anyone with repo write access can now view the repository-level scan report. This enables developers without repo admin privileges to review and address issues.
Versions
Version 2.2.0 • Bitbucket Data Center 5.3.0 - 7.13.0 • Released 2021-05-27
Summary
Allow developers to view the repository-level scan reports
Details
- SOTERIA-176 -- Anyone with repo write access can now view the repository-level scan report. This enables developers without repo admin privileges to review and address issues.
Installation
- Log into your Bitbucket instance as an admin.
- Click the admin dropdown and choose Atlassian Marketplace. The Manage add-ons screen loads.
- Click Find new apps or Find new add-ons from the left-hand side of the page.
- Locate Security for Bitbucket via search. The appropriate app version appears in the search results.
- Click Try free to begin a new trial or Buy now to purchase a license for Security for Bitbucket. You're prompted to log into MyAtlassian. Security for Bitbucket begins to download.
- Enter your information and click Generate license when redirected to MyAtlassian.
- Click Apply license. If you're using an older version of UPM, you can copy and paste the license into your Bitbucket instance.
To find older Security for Bitbucket versions compatible with your instance, you can look through our version history page.
- Log into your Bitbucket instance as an admin.
- Click the admin dropdown and choose Atlassian Marketplace. The Manage add-ons screen loads.
- Click Find new apps or Find new add-ons from the left-hand side of the page.
- Locate Security for Bitbucket via search. The appropriate app version appears in the search results.
- Click Try free to begin a new trial or Buy now to purchase a license for Security for Bitbucket. You're prompted to log into MyAtlassian. Security for Bitbucket begins to download.
- Enter your information and click Generate license when redirected to MyAtlassian.
- Click Apply license. If you're using an older version of UPM, you can copy and paste the license into your Bitbucket instance.
To find older Security for Bitbucket versions compatible with your instance, you can look through our version history page.
Similar apps
Sonar for Bitbucket
Awesome Graphs for Bitbucket
External Hooks by Reconquest
Better Commit Policy for Jira (Git, SVN)
Workzone: PullRequest Workflow
Power Editor for Bitbucket
Code Owners for Bitbucket
Better Commit Policy for Bitbucket
SonarQube Connector for Jira
SonarQube Connector for Confluence
MergeBase CodeGreen - SCA & CVE Defense
Submodule Changes for Bitbucket
Git Flow Chart
Pull Request Analytics for Bitbucket
Pull Request Review Dashboard
Issue Actions Todo
Synack App for Jira Server & Data Center
UI Tweaks for Bitbucket
Time to SLA
GDPR (DSGVO) and Security for Confluence
GDPR (DSGVO) and Security for Jira