Start with the workflow
An app should make a specific job easier. Define the users, the information they need, the action they take, and the systems that action touches. This gives development and security review a common starting point.
Actiotech brings software engineering and integration experience to discussions about Atlassian apps. We can help frame the application’s requirements alongside its security architecture and assessment needs.
Make architecture decisions deliberately
Forge provides a platform for extending Atlassian products. The choice of UI, storage, events, web triggers, and remote services changes the application’s design and the responsibilities that remain with its developer.
For a new project, discuss:
- Product behaviour: the Jira or Confluence workflows the app will support.
- Identity and permissions: user actions, background jobs, and least-privilege access.
- Data boundaries: where data travels, which services process it, and how tenants remain separated.
- Delivery and operation: release environments, diagnostics, dependencies, and remediation ownership.
Review security alongside functionality
An application can work correctly for its intended user and still expose an unintended path to someone else. Test permissions and failure cases as deliberately as the happy path. Our security services offer a place to examine architecture, application behaviour, and prioritised remediation.
Explore security services or discuss your development requirements.
Read the engineering notes
- Checking permissions in Forge: when to use asUser and asApp
- What to check before putting a Forge Remote backend into production
- Testing an AI assistant inside a Jira app
Atlassian, Jira, Confluence, and Forge are trademarks of Atlassian. This page does not imply Atlassian partnership or endorsement.