Free app
OVERALL RATINGS
INSTALLS
3
SUPPORT
- Partner Supported
TRUST SIGNALS
Key highlights of the appBlock risky file types on Jira issues before they become a problem
Supporting media
More details
Attachment Policy Manager enforces what can be attached to Jira issues, per project rather than site-wide. A design project that lives on large images and a support project that should never see an executable are not the same problem.
Set rules in seconds: block or allow by extension, cap file size, and exempt the service accounts your integrations run as. Monitor mode records exactly what a policy would remove without touching a single file, so you can prove the rules are right before anything is deleted.
Every removal is explained in a comment that mentions the uploader. Every policy change is attributed and logged. The audit log exports to CSV for incident tickets, with formula-injection guarding so a hostile file name cannot execute in the spreadsheet you open it in.
Runs entirely on Atlassian’s Forge platform. No external servers, no third-party services, and no data leaves your Atlassian site.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy and security questionnaire has been filled by the partner
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Attachment Policy Manager for Jira integrates with your Atlassian app
Version information
Version 4.1.0•for Jira Cloud
- Release date
- Aug 18th 2026
- Summary
- Per-project attachment rules with monitor mode, audit log and CSV export
- Details
First public release.
Per-project attachment policy: allowed extensions, blocked extensions and a maximum file size, configured in Project settings.
Three modes. Off, Monitor and Enforce, so nothing destructive happens by surprise. Monitor records what a policy would remove without touching a file.
Live simulator that previews a verdict against unsaved edits, including disguised double extensions such as invoice.exe.txt.
One-click presets: block executables, images only, documents only, and a size cap.
Exempt service and integration accounts by user picker. Every exemption is recorded.
Full audit log with CSV export, and policy change history attributed per field.
Cross-project overview for Jira administrators, including the projects with no policy at all.
- Payment model
- Free
- License type
- Commercial