Jira Integration

The Jira integration connects Detectify with your Jira projects, automatically creating issues for new vulnerability findings and keeping statuses synchronized between both platforms through bi-directional sync.

Key Features

Bi-Directional Sync

The Jira integration is bi-directional. This means:

• Detectify to Jira: When Detectify finds a new vulnerability, it automatically creates a Jira issue with the finding details, severity, affected asset, and remediation guidance.
• Jira to Detectify: When you resolve a Jira issue that was created from a Detectify finding, the finding status in Detectify is automatically updated to reflect the resolution.

This keeps vulnerability data consistent across both platforms without requiring manual status updates.

Automatic Issue Creation

New findings are automatically created as Jira issues with:

• Summary including the vulnerability type and affected asset
• Description with full finding details, reproduction steps, and remediation guidance
• Priority mapped from the Detectify severity level
• Labels for easy filtering and reporting

Setup

Prerequisites

• A Detectify account with admin or team admin permissions
• A Jira Cloud or Jira Data Center instance
• Permission to create and configure integrations in Jira

Configuration Steps

1. In Detectify, navigate to Settings > Integrations.
2. Find Jira and click Configure.
3. Enter your Jira instance URL (for example, https://yourcompany.atlassian.net).
4. Authenticate with Jira. For Jira Cloud, this uses OAuth. For Jira Data Center, provide an API token.
5. Select the Jira project where issues should be created.
6. Map Detectify severity levels to Jira priority levels:
   • Critical -> Highest
   • High -> High
   • Medium -> Medium
   • Low -> Low
7. Configure which finding types should automatically create Jira issues. You can limit this to specific severity levels or finding categories.
8. Enable bi-directional sync if you want Jira status changes to update Detectify.
9. Click Save.

Testing the Integration

After setup, click Send Test Issue to verify that a Jira issue is created in the configured project. Check that:

• The issue appears in the correct project
• The priority mapping is correct
• The description contains the expected information

Managing the Integration

Filtering

You can configure which findings create Jira issues:

• By severity: Only create issues for Critical and High findings
• By product: Only create issues from specific Detectify products
• By asset: Only create issues for specific domains or asset groups

Duplicate Prevention

Detectify tracks which findings have already been sent to Jira. If the same vulnerability is detected in a subsequent scan, a duplicate issue is not created. Instead, the existing issue is updated if there are new details.

Status Mapping

Configure how Jira statuses map back to Detectify finding statuses. For example, map Jira’s “Done” status to Detectify’s “Resolved” status.

Disconnecting

To remove the Jira integration, navigate to Settings > Integrations > Jira and click Disconnect. Existing Jira issues are not affected, but new findings will no longer create Jira issues and bi-directional sync will stop.