Atlassian · Jira Cloud
Attachment Policy Guard
Block risky attachment types in Jira Cloud, in report or enforce mode.
See Marketplace for pricing and installation
Published on the Atlassian Marketplace.
Installation is handled by Atlassian.
- Works with Jira Cloud
- Marketplace Atlassian Marketplace
Live
Listed on the Atlassian Marketplace
Attachment Policy Guard for Jira is published on the Atlassian Marketplace. Visit its listing for installation and current plan options.
Listed onAtlassian Marketplace
What it does
Attachment Policy Guard for Jira is an Atlassian Forge app for Jira Cloud. Administrators configure allowed or blocked attachment types for a site and individual projects. When a new attachment is created, the app checks its name and available file signature; report mode records matches, while confirmed enforce mode can remove them and optionally leave a work item note.
Capabilities
Rules for new attachments
Administrators choose allowed and blocked file types for the site, then add project-specific overrides. The app evaluates new attachment-created events; it does not intercept an upload before Jira accepts it.
Checks more than the filename
The app checks the filename and, when available, the file's leading bytes against its file-type rules. A file whose extension does not match its detected signature can be flagged. This is file-type policy enforcement, not malware scanning.
Start in report mode
A new configuration starts in report mode, which records matches without deleting attachments. An administrator must explicitly confirm a switch to enforce mode; deletion also requires an active Marketplace licence.
Auditable actions and optional notes
Matching attachments are recorded in an audit log. In enforce mode, the app can remove a matching attachment and optionally add a note to its work item. Administrators can review and export audit records as CSV.
Runs on Atlassian infrastructure
The Forge app stores policy and audit data in Atlassian-hosted storage and makes no external network calls. File contents are read in memory for type detection and are not stored by the app.
Questions
Where does Attachment Policy Guard run?
Attachment Policy Guard is a Forge app. Its functions and storage run on Atlassian infrastructure provisioned for your Jira site. Atesen Software operates no server or database for the app.
How do I get help with Attachment Policy Guard?
Support for Attachment Policy Guard is provided by email in English and Turkish.
Email support@atesensoftware.com. We aim to acknowledge every support email within two business days (Europe/Istanbul).
Limits and what we do not claim
- It is newly published on the Atlassian Marketplace and has no public review history yet.
- It checks attachment type; it does not scan for viruses or malware.
- It evaluates new attachment-created events and cannot block an upload before Jira accepts it.
- It has no security certification and has not undergone a third-party audit.
- Atesen Software is an independent third-party Marketplace vendor. The app is not made, sponsored or endorsed by Atlassian.
Marketplace
Atlassian Marketplace: Published on the Atlassian Marketplace.
Listed onAtlassian Marketplace