Atlassian · Jira Cloud

Attachment Policy Guard

Block risky attachment types in Jira Cloud, in report or enforce mode.

Works with Jira Cloud
Marketplace Atlassian Marketplace

Attachment Policy Guard at a glance: the problem, what it does, the result.
Real product screen with demo or test data.

Coming soon

Submitted for review

Attachment Policy Guard for Jira is awaiting Atlassian Marketplace review under ECOHELP-175144. It has not been approved or listed, and cannot be installed by the public today.

Coming soon toAtlassian Marketplace

Attachment Policy Guard is not on sale yet. For Jira and Confluence, you can start today with Auto Participants, Bulk Page Restrictions for Confluence, Atesen OpenAPI & Swagger Viewer for Confluence.

See the live Jira and Confluence apps

What it does

Attachment Policy Guard for Jira is an Atlassian Forge app for Jira Cloud. Administrators configure allowed or blocked attachment types for a site and individual projects. When a new attachment is created, the app checks its name and available file signature; report mode records matches, while confirmed enforce mode can remove them and optionally leave a work item note.

Capabilities

Rules for new attachments

Administrators choose allowed and blocked file types for the site, then add project-specific overrides. The app evaluates new attachment-created events; it does not intercept an upload before Jira accepts it.

Checks more than the filename

The app checks the filename and, when available, the file's leading bytes against its file-type rules. A file whose extension does not match its detected signature can be flagged. This is file-type policy enforcement, not malware scanning.

Start in report mode

A new configuration starts in report mode, which records matches without deleting attachments. An administrator must explicitly confirm a switch to enforce mode; deletion also requires an active Marketplace licence.

Auditable actions and optional notes

Matching attachments are recorded in an audit log. In enforce mode, the app can remove a matching attachment and optionally add a note to its work item. Administrators can review and export audit records as CSV.

Runs on Atlassian infrastructure

The Forge app stores policy and audit data in Atlassian-hosted storage and makes no external network calls. File contents are read in memory for type detection and are not stored by the app.

Questions

Where does Attachment Policy Guard run?

Attachment Policy Guard is a Forge app. Its functions and storage run on Atlassian infrastructure provisioned for your Jira site. Atesen Software operates no server or database for the app.

The full Attachment Policy Guard privacy page

How do I get help with Attachment Policy Guard?

Support for Attachment Policy Guard is provided by email in English and Turkish.

Email support@atesensoftware.com. We aim to acknowledge every support email within two business days (Europe/Istanbul).

What we do not claim

The app is under Marketplace review and is not publicly installable. It has no public installation count or customer review history.
It checks attachment type; it does not scan for viruses or malware.
It evaluates new attachment-created events and cannot block an upload before Jira accepts it.
It has no security certification and has not undergone a third-party audit.
Atesen Software is an independent third-party Marketplace vendor. The app is not made, sponsored or endorsed by Atlassian.

Marketplace

Atlassian Marketplace: Awaiting review under ECOHELP-175144 — not approved, not listed, and not installable by the public.