Bitbucket
Overview
Integrating Bitbucket with Vanta automates security monitoring and evidence collection for your code repositories, pull request workflows, and user access. With continuous visibility into your development processes, you can easily meet compliance requirements like SOC 2, ISO 27001, and HIPAA—without chasing down manual proof.
Top capabilities
Streamline compliance and reduce risk with automated tests that help you:
- Enforce secure code reviews by verifying pull request approvals and branch protection
- Ensure Bitbucket user access is properly managed, with MFA enabled and timely offboarding
- Confirm repositories are private and access is limited to authorized users
- Maintain an accurate inventory of code repositories, including those handling user data
- Automatically collect audit-ready evidence for access controls, code changes, and repository settings
Bitbucket Workspace Members — Workspace memberships with the user account, workspace, permission (owner, collaborator, or member), and last_accessed time.
Bitbucket Repositories — Repositories with uuid, name, fullname, isprivate visibility, main branch, and branch restriction rules.
Bitbucket Pull Requests — Pull requests with id, title, state, author, reviewers, approving participants, and commit statuses.
Bitbucket Workspace Invitations — Pending workspace invitations with email, permission granted (read, write, or admin), invited_by, and sent time.
Request a demo to see Vanta integrations in action
Head of Information Security & Compliance
