Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 23 Sep 2026.

No technology is perfect and Presago believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our Atlassian Marketplace apps. Good luck, and happy hunting! Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority. IMPORTANT: Vulnerability reports on the exact same vulnerability across different target apps belonging to this program are not eligible for rewards. Please submit a single report. All the apps are hosted under the Atlassian Forge domain .prod.atlassian-dev.net. We want to specify that only the apps hosted on this domain format are valid for the program. All other domains owned by Presago are excluded from this program. Performing any type of loading testing (DoS/DDoS or similar), including tests on the instance, applications, or network, is strictly prohibited.