You can check additional security info of our plugins in next links:
Infrastructure
Our plugins are stored at OVH servers
https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/
Atlassian
Cloud Security Participant
We are part of the Atlassian Program Cloud Security Participant
https://www.atlassian.com/blog/add-ons/marketplace-cloud-security-participant-badge
https://marketplace.atlassian.com/categories/app-security-badging
Bug bounty
We have a public bug bounty for our Connectors
https://www.atlassian.com/licensing/marketplace#what-is-the-marketplace-bug-bounty-program
SonarQube
We analyze each commit of our plugins with last version of SonarQube to validate security, reliability and maintainability
https://www.sonarqube.org/features/security/
OWASP Top 10
Thanks to SonarQube, we check the OWASP Top 10 verification
https://owasp.org/www-project-top-ten/
CWE Top 25
Thanks to SonarQube, we check the CWE Top 25 verification
https://cwe.mitre.org/top25/archive/2021/2021_cwe_top25.html