Website Security Checklist for JIRA with Apache reverse proxy

[Sameera Shaakunthala [inactive]]

Is there a JIRA-specific security checklist published by Atlassian or a reliable organization?

Our JIRA instance runs behind Apache (reverse proxy) and is open to the public Internet.

Many thanks!

--

Shaakunthala

[Vishwajeet Singh · Accepted solution]

As far as I know there isn't a official check lsit as such, there are few articles which address this issue.

You can have a look at following documentation https://confluence.atlassian.com/display/JIRA/Securing+JIRA+with+Apache+HTTP+Server

Also you should have a look at mod_security apache module .