Automatic security check · Public OSINT only
Company website
bitbucket.org security check
Public OSINT valuation for bitbucket.org: grade B (76/100). Title signal “Bitbucket | Git solution for teams using Jira”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
76
/100
Grade B
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
Social & LinkedIn
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored bitbucket.org
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (bitbucket.org).
Risk signals
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (bitbucket.org).
- Final HTTP status 200 at https://bitbucket.org/.
Technical details
DNS
resolved- A
- 185.166.143.49, 185.166.143.48, 185.166.143.50
- AAAA
- 2401:1d80:3210:1:0:bbc:1:df7c, 2401:1d80:3210::bbc:1:df7c, 2401:1d80:3210:2:0:bbc:1:df7c
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Amazon
- notAfter
- Dec 23 23:59:59 2026 GMT
- SAN sample
- *.bitbucket.org, bitbucket.org
- error
- —
HTTP & security headers
4 present- finalUrl
- https://bitbucket.org/
- status
- 200
- server
- AtlassianEdge
- x-powered-by
- —
- present
- content-security-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Bitbucket | Git solution for teams using Jira
- generator
- —
- tech
- —
- script hosts
- wac-cdn.atlassian.com, atl-onetrust-wrapper.atlassian.com
- description
- Bitbucket Cloud is a Git-based code and CI/CD tool optimized for teams using Jira.
RDAP / registration
rdap- domain
- bitbucket.org
- registrar
- MarkMonitor Inc.
- created
- 1997-11-24T05:00:00.33Z
- expires
- 2028-11-23T05:00:00Z
- nameservers
- ns-1305.awsdns-35.org, ns-1746.awsdns-26.co.uk, ns-445.awsdns-55.com, ns-584.awsdns-09.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404