Matify / Access Auditor for Jira

Support

Access Auditor for Jira is supported by Matify. One address, read by a person.

Three ways in, all fine

Ticket form, no account. Open a support ticket — fill in the form and your own email program sends it. Nothing to sign up for, and private, so it is also the right route for a security report.

Public tracker. Open a ticket on GitHub — support questions, bug reports and feature requests, with a form that asks for what an answer needs. Reading what is already reported needs no account; opening a ticket needs a free GitHub one.

Email. mira.maty@web.de — no account required, and the right choice for anything you would rather not write in public.

Security

Never report a suspected vulnerability as a public issue. Use the ticket form, which is private, or email mira.maty@web.de with security in the subject line, or use GitHub's private reporting from the security policy. A flaw posted in public is readable by everyone before a fix exists.

Hours and response times

Monday to Friday, 09:00–17:00 Central European Time. A person replies within 1 business day for a critical problem or a suspected vulnerability, 2 for high, 3 for normal and 5 for low. The full terms, including security fix timelines, are in the Matify service level agreement, which covers every Matify app.

Before you write

Two pages answer most questions faster than an email round trip: the troubleshooting page, which lists every error code the app can show and what to do about each, and the FAQ.

What to send

If something went wrong rather than being unclear, include a diagnostic report:

  1. Open the app in Jira and go to the Diagnostics tab.
  2. Select Copy diagnostic report.
  3. Paste it into your email, with a short description of what you expected and what happened instead.

The report is built to contain no personal data and no credentials — no project name, group name, account identifier or permission holder appears in it. It answers most of the questions a first reply would otherwise have to ask.

Reporting a security issue

Please include enough detail to reproduce it. How the app handles data, and what it deliberately does not do, is set out in the security and privacy statement — if you find something that contradicts it, that is worth reporting in itself.

What is not supported

Jira Data Center and Jira Server; the access model of team-managed projects; and any Atlassian product other than Jira Cloud. These boundaries are described in known limitations rather than discovered after purchase.