--- title: How does Edgescan integrate with Jira Cloud? description: Edgescan has a Jira plugin in the Atlassian marketplace. You can pull any Edgescan data you need into Jira. --- [Skip to content](https://kb.edgescan.com/knowledge/how-does-edgescan-integrate-with-jira#main-content) English Show submenu for translations [![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/) Open main navigation Close main navigation - English Show submenu for translations Search the Edgescan knowledge base - There are no suggestions because the search field is empty. 1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en) 2. [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en) 3. [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing) # How does Edgescan integrate with Jira Cloud? ## Edgescan has a Jira plugin in the Atlassian marketplace. You can pull any Edgescan you need into Jira. Version Number: v1.0.3 Published Date: 09 Oct 2026 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ ### What is it? The Edgescan plugin for Jira Cloud links your Edgescan assets to Jira projects. It reads vulnerability data from the Edgescan API, creates a Jira issue for each new vulnerability, keeps the issue details up to date, and moves the issue to a status you choose when the vulnerability is closed in Edgescan. Development teams can then fix security findings in the Jira workflow they already use. **The sync is one-way, from Edgescan to Jira.** Edgescan is the source of truth. Closing, resolving or changing an issue in Jira does not close, discard or change the vulnerability in Edgescan. To close a finding in Edgescan, retest it or discard it in Edgescan. Before you start #### **In Edgescan** - An API token created by an Edgescan user with the Org Admin or Asset Admin role who can read the assets and vulnerabilities you want to sync. The integration can see what the token's creator can see. We recommend a token with limited permissions; see "How Do I Create An API Token With Limited Permissions?" and "Creating API and Authentication Tokens". - The assets you link must be active, licensed assets. ### **In Jira Cloud** - A Jira site or organisation administrator to install the app (Manage apps permission). - A Jira project administrator to link a project (Project Settings \> Apps \> Link to Edgescan). - A user for the plugin to create tickets as: the default Edgescan app user, or a service account you choose. That user needs these permissions on the project: Browse Projects, Create Issues, Edit Issues, Transition Issues, Add Comments, and Attach Files (needed for embedded screenshots). ### How do I install the plugin? 1. Open the Edgescan plugin for Jira Cloud on the Atlassian Marketplace and click "Get it now". ![](https://www.edgescan.com/wp-content/uploads/2022/12/jira1-1.png) 2. Select your Jira site and click "Install app". 3. On the page that follows, click "Get it now" again. ![](https://www.edgescan.com/wp-content/uploads/2022/12/jira2-1.png) The Jira Cloud plugin is a cloud-hosted app and updates automatically, so there is no package to download or upgrade. The standalone installable package, which is versioned separately, is for Jira Data Center only. ### How do I connect Jira to Edgescan? 1. After installation, click "Configure" in the pop-up, or go to Apps \> Manage your apps and open the Edgescan app. 2. Paste your Edgescan API token into the "API token" field. ![](https://www.edgescan.com/wp-content/uploads/2022/12/MicrosoftTeams-image.png) 3. In "Select Projects", choose the Jira projects that are allowed to use the integration. 4. Click "Save". A message tells you whether authorisation succeeded. ### How do I link a Jira project to Edgescan? 1. In the Jira project, go to Project Settings \> Apps \> Link to Edgescan. ![](https://www.edgescan.com/wp-content/uploads/2022/12/jira-5.png.webp) 2. Click "Edit" and set the options below. 3. Save, then run a sync (see "How does syncing work?"). ![](https://www.edgescan.com/wp-content/uploads/2022/12/jira-3.png.webp) | Option | What it does | | --- | --- | | Linked Assets | The Edgescan assets whose vulnerabilities create issues. At least one asset is required. | | Risk Mapping | Maps each Edgescan risk rating (Critical, High, Medium, Low, Minimal) to a Jira priority. Set a rating to "Ignore" to create no issues for that rating. | | Create Issue with Type | The Jira issue type for new issues, for example Bug or Task. | | Components | The Jira components attached to new issues. | | Add to Epic (optional) | The key of the epic to add new issues to. | | Add to Task | Shown only when the issue type is "Subtask". | | Assign to (optional) | Assigns new issues to a user. | | Status on Create | The status new issues move to. | | Status on Close | The status issues move to when the vulnerability is closed. A transition to this status must always be available in the Jira workflow. | Each project keeps its own link settings: its own assets, risk mapping, issue type and workflow statuses. Installing the app does nothing until a project administrator links a project. ![](https://www.edgescan.com/wp-content/uploads/2022/12/jira-6.png.webp) ### Boards If your project uses several boards, use the Board selector to configure the integration differently for each board. A board you have enabled auto-syncs even when the project-level setting is not enabled. #### How does syncing work? When you link an asset, the plugin reads it through the Edgescan API and imports all open vulnerabilities that match your risk mapping. A sync creates an issue for each new vulnerability on the linked assets, updates existing issues, and moves the issues of closed vulnerabilities to your "Status on Close". - **Auto-Sync** is off by default. Click "Enable Auto-Sync" and the plugin syncs every 5 minutes. - **Manual sync:** click "Sync Now". This is only available while Auto-Sync is off. - The plugin shows whether a sync is running and reports any errors. Allow about 15 minutes for the first sync, because it has to process all existing vulnerabilities on the linked assets. A sync after you change the configuration is also more thorough, so changes can take around 15 minutes to appear. There is no limit on the number of vulnerabilities imported per asset. For assets with thousands of vulnerabilities, the first sync can take up to 15 minutes. #### What do the created issues look like? - Issues use the type, priority, components and status you configured, and are added to the epic or assigned to the user you chose. - The issue title is ` @ `. - The description shows the vulnerability location above the vulnerability details and links back to the vulnerability in the Edgescan portal. - Synced issues include screenshots as proof of the finding, embedded in the ticket detail. #### What happens to existing issues when I change a setting? | If you change... | Existing issues | Future issues | | --- | --- | --- | | A risk's priority mapping | Updated to the new priority | Use the new priority | | Create Issue with Type | All updated to the new type | Use the new type | | Add to Epic, Add to Task or Assign to | Not changed | Use the new value | | Status on Create or Status on Close | Not changed | Use the new value | | A linked asset is deselected | Issues for that asset's vulnerabilities are deleted | None created | | A risk rating is set to "Ignore" | Issues for vulnerabilities with that rating are deleted | None created | Deleting issues cannot be undone, so check which assets and risk ratings are selected before you save. ### Troubleshooting | What you see | Likely cause | What to do | | --- | --- | --- | | "Failed to authorize" or "Invalid token" when you save the token | The API token has expired, was deleted, or belongs to a user who has been deactivated in Edgescan | Create a new API token in Edgescan and enter it again in the Jira app configuration | | "Your plugin session has expired" | The Edgescan configuration screen has its own 15-minute session timer, separate from your Jira login | Refresh the browser page to open a new configuration session | | No issues are created after the first sync | The first sync can take about 15 minutes, or the risk ratings you need are set to "Ignore" | Wait 15 minutes, then check Linked Assets and Risk Mapping | | "Sync Now" is greyed out | Auto-Sync is on | Turn Auto-Sync off to sync manually | | "Could not transition issue", or issues do not move when a vulnerability closes | The Jira workflow for the issue type has no transition into your Status on Close | Add a direct or global transition to that status in the Jira workflow, or choose a different Status on Close | | Issues have disappeared | An asset was deselected or a risk rating was set to "Ignore" | Reselect the asset or change the rating mapping, then sync | | Changes to Assign to or Status on Create have no effect on existing issues | These settings apply to new issues only | Change existing issues in Jira | | Tickets are created but screenshots are missing | The ticket user does not have the Attach Files permission, so Jira refuses the upload while the issue itself is created | Give that user the Attach Files permission in the project's permission scheme | There is no tenant or subdomain setting in the Jira Cloud app. An invalid token error means Edgescan rejected the token. - [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content) - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start) - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements) - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context) - [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content) - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts) - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods) - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory) - [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content) - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning) - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting) - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication) - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning) - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings) - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows) - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings) - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations) - [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content) - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts) - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic) - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy) - [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content) - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies) - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas) - [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content) - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation) - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management) - [Vulnerability Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#vulnerability-management) - [License Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#license-management) - [Credentials Vault](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#credentials-vault) - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers) - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards) - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights) - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks) - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details) - [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content) - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events) - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing) - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication) - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports) - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms) - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook) - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing) - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar) - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops) - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation) - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations) - [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content) - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup) - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration) - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration) - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings) - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings) - [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content) - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates) - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates) - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates) - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates) - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes) - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019) [![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com) Copyright © 2026 Edgescan. All rights reserved.