AppSec Assistant

Automated Security Recommendations in Jira CloudGet AI powered security recommendations in Jira Cloud - Write your software to be secure-by-design.Get Started Now!Data SecurityYour OpenAI API key, your data, your control. AppSec Assistant is designed to keep your data secure by design, ensuring that your sensitive information never leaves your trusted environments.Simple SetupAdd your OpenAI API key, add your organization (optionally), and you're ready to bolster your SDLC security.Don't Want to Use OpenAI?Check out AppSec Assistant PRO to get the same benefit but from Meta's Llama 3 Model!Scale & SecureReduce time spent on manual AppSec reviews. Get security recommendations tailored to each ticket at the click of a button.Empower DevelopersDevelopers move fast - AppSec Assistant keeps up. Ease the security review bottleneck, and trust that your developers are considering security from the start.Using Your Own LLM / Gen-AI?We build custom deployments for Jira Cloud that can use your own LLM / infrastructure. Please contact us for more information.Get In TouchTry Before You BuyHead on over to our Atlassian Marketplace listing to see AppSec Assistant in action.Start Free Trial© 2024 AppSec Assistant --- Privacy PolicyEffective Date: April 14, 2024Welcome to AppSec Assistant. This Privacy Policy explains how we collect, use, and share information when you use our Jira Application ("App"). We are committed to ensuring the privacy and security of your data.1. Information CollectionUser-Provided Information: To use our App, the administrator must enter their own OpenAI API key and specify their OpenAI organization if applicable. This information is essential for the functionality of our App and is not stored or used for any other purpose.Jira Data: Our App processes only the summary and description of Jira issues to generate security recommendations. This data is sent directly to OpenAI's API for analysis.2. Use of InformationThe information provided by the administrator and the Jira issue data are used exclusively for generating security recommendations within the App.The data processed by OpenAI's API is subject to OpenAI's privacy practices, which we do not control. We encourage you to review OpenAI's Privacy Policy.3. Information SharingOpenAI API: The only external communication our App has is with OpenAI's API. Your data is shared with OpenAI strictly for the purpose of generating security recommendations.No Other Sharing: We do not share your information with any other third parties unless required by law.4. Data SecurityWe implement reasonable security measures to protect the information under our control from loss, theft, misuse, and unauthorized access.However, no internet or email transmission is ever fully secure or error free. You should use caution whenever submitting information online and take special care in deciding what information you send us via the application.The OpenAI API key and org are encrypted and stored using  Atlassian's Secret store.5. Changes to This Privacy PolicyWe may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.We encourage you to review this Privacy Policy periodically for any changes.6. Contact UsIf you have any questions about this Privacy Policy, please contact us at our support portal.By using our App, you acknowledge that you have read and understood this Privacy Policy. Thank you for choosing AppSec Assistant.© 2024 AppSec Assistant --- Terms of ServiceEffective Date: April 14, 2024Welcome to AppSec Assistant. These Terms of Service ("Terms") govern your access to and use of our Jira Application ("App"). By accessing or using the App, you agree to be bound by these Terms and our Privacy Policy.1. LicenseGrant of License: We grant you a revocable, non-exclusive, non-transferable, limited license to use the App solely for your internal business purposes subject to these Terms.Restrictions: You may not modify, distribute, sell, or lease the App, nor may you reverse engineer or attempt to extract the source code unless laws prohibit these restrictions or you have our written permission.2. User ObligationsAccount Security: You are responsible for safeguarding the OpenAI API key you use to access the App and for any activities or actions under your account.Compliance with Laws: You must use the App in compliance with all applicable laws, including but not limited to privacy laws and regulations.3. Intellectual PropertyOwnership: The App and all rights therein, including intellectual property rights, are and shall remain our property or the property of our licensors. Neither these Terms nor your use of the App convey or grant to you any rights in or related to the App except for the limited license granted above.4. External ServicesOur App uses the OpenAI API to process data. Your interaction with OpenAI is governed by OpenAI's terms and privacy policy, and you are responsible for reviewing those terms and policies. You can review their policies at  https://openai.com/policies5. TerminationWe may terminate your access to the App without cause or notice, which may result in the forfeiture and destruction of all information associated with the app. All provisions of the Terms that by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, warranty disclaimers, indemnity, and limitations of liability.6. DisclaimersThe App is provided on an "AS IS" and "AS AVAILABLE" basis. We disclaim all warranties, express or implied, including any warranties of accuracy, non-infringement, merchantability, and fitness for a particular purpose.7. Limitation of LiabilityTo the maximum extent permitted by applicable law, in no event shall we be liable for any indirect, punitive, incidental, special, consequential, or exemplary damages, including without limitation damages for loss of profits, goodwill, use, data, or other intangible losses, arising out of or relating to the use of, or inability to use, the App.8. IndemnificationYou agree to defend, indemnify, and hold harmless our company (Oonicorn, LLM), its officers, directors, employees, and agents, from and against any claims, damages, obligations, losses, liabilities, costs or debt, and expenses arising from: your use of and access to the App; your violation of any term of these Terms; your violation of any third-party right, including without limitation any copyright, privacy, or property right; or any claim that your content caused damage to a third party.9. ModificationWe reserve the right, at our sole discretion, to modify or replace these Terms at any time. If a revision is material we will provide at least 30 days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion.10. Contact UsIf you have any questions about these Terms, please contact us at our support portal.By using AppSec Assistant, you agree to be bound by these Terms. If you do not agree to these Terms, please do not use our App. Thank you for choosing AppSec Assistant.© 2024 AppSec Assistant --- Security PolicyAt Oonicorn LLC, we are committed to ensuring the security of your data and the integrity of our AppSec Assistant application. This security policy outlines the measures we take to protect your information and ensure our application's reliability and safety.Secure StorageYour OpenAI API key and other configuration settings are securely stored using Atlassian's secret storage API, ensuring that your credentials are safeguarded against unauthorized access and leaks.Data PrivacyWe strictly adhere to privacy best practices and regulations to ensure your data remains confidential. AppSec Assistant does not collect, share, or sell any personal information to third parties.Security PracticesOur development team follows secure coding practices, including regular security audits, code reviews, and automated testing to identify and rectify vulnerabilities. We continuously update our application to address new security threats.Contact UsIf you have any questions or concerns about our security practices, please contact our support team at our support portal, linked in the footer.© 2024 AppSec Assistant