Security for Bitbucket

Run security audits for committed API keys, passwords, and more. Protect your dev workflow against accidental credential leaks.

Overview

Scanning Every Push with the Security Hook

Repository-level Scan Report

The Security Scan Report: Viewing Bitbucket's Overall Security Status

Exporting a Security Scan Report for External Use

Hiding false positives, revoked credentials, etc.

Allow-listing Detected Secrets

Defining Global Custom Detection Rules

Enabling and Disabling Global Detection Rules

Granting App Access to Additional Users and Groups

Customizing the hook messages

Defining Repository-Level Detection Rules

Frequently Asked Questions (FAQ)

REST API for Scripting & Automation

REST API for Mass Scanning

Vulnerabilities Detected by Security for Bitbucket

Example Vulnerabilities Detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.