Security for Bitbucket

Run security audits for committed API keys, passwords, and more. Protect your dev workflow against accidental credential leaks.

Overview

Scanning Every Push with the Soteri - Scan Commits Security Hook

Repository-level Scan Report

Project-level Dashboard

The Global Dashboard: Viewing Bitbucket's Overall Security Status

Exporting a Security Scan Report for External Use

Hiding false positives, revoked credentials, etc.

Allow-listing Detected Secrets

Defining Global Custom Detection Rules

Enabling and Disabling Global Detection Rules

Granting App Access to Additional Users and Groups

Customizing the hook messages

Defining Repository-Level Detection Rules

Frequently Asked Questions (FAQ) and Troubleshooting

REST API for Scripting & Automation

REST API for Mass Scanning

Built-In Scanning Rules

Example Scan Findings Detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.