Skip to content
Source-backed analysis14

Review basis

Research-based review: the AppDuo Editorial Team compiled it from official pages, documentation, app stores, press and user feedback, without hands-on testing. Every claim links to a source with the date it was checked.

14 reference sources

Information updated Nov 11, 2026

How we review
Bitbucket logo

Bitbucket Review

Atlassian's Git hosting and CI/CD, tightly linked to Jira

By Official AppDuo editorial team · Updated

  • Web
Freemium · $3.65/mo (business plan)
Visit Bitbucket
Compare side by side
On this page

Decide at a glance

Our verdict

A good fit for teams already on Jira that want Git hosting, CI/CD and access control in the Atlassian stack at a low per-user price. The trade-offs are a Free plan capped at 5 users and 50 build minutes with community-only support, and outages documented by Atlassian and the press.

Best for: Jira teams that want branches, pull requests and deployments linked to work items

Skip it if: Teams that need a large free build allowance for big open-source projects

Pros

  • Jira integration: create branches and see development and deployment info inside an issue
  • Built-in Bitbucket Pipelines, configured with a YAML file in the repository
  • Low listed prices: $3.65 (Standard) and $8 (Premium) per user per month

Cons

  • Free plan is limited to 5 users, 50 build minutes and 1 GB storage, with community-only support
  • Documented outages, such as 21 Jan 2025 (from about 15:30 to 20:08 UTC per The Register)
All pros and cons · Who is it for?

Pros

  • Free plan includes unlimited private repositories
  • Rated 4.5/5 on Gartner Peer Insights and 4.6/5 on Software Advice

Cons

  • Self-hosted Data Center had a critical, actively exploited flaw (CVE-2022-36804, since patched)
  • Only an English interface was verified

Best for

  • Small teams of up to 5 that need free private repositories
  • Organisations that need permission controls and enforced merge checks on Premium

Skip it if

  • Anyone who wants Mercurial hosting, which Bitbucket Cloud dropped in 2020

Experience & key features

What Bitbucket is

Bitbucket is Atlassian's Git source-code hosting service. Its product page describes it as one place for issues, source code, container registries and CI/CD, with AI features such as search, code review and a Remote MCP Server (beta). Atlassian claims 15 million developers build on Bitbucket; this is a vendor figure.

Key features

Pipelines runs builds and deployments on Atlassian-hosted or self-hosted runners and is configured with a YAML file in the repository. The Jira integration lets you create branches from issues and moves issues automatically when pull requests are created or closed. Permissions can be set at workspace, project, repository, branch, environment and package level. Besides Bitbucket Cloud, Atlassian sells a self-hosted Data Center edition.

Pricing and value

Per the pricing page, the Free plan covers up to 5 users with community support only. Standard costs $3.65 and Premium $8 per user per month. Standard includes 2,500 build minutes and Premium 3,500 per month; an extra 1,000 minutes cost $10/month. Premium also carries a 99.9% uptime SLA. The page lists no VND or yearly prices.

More analysis

Versus alternatives

Bitbucket fits teams that already use Jira. Teams that want a broader community ecosystem or a different DevOps platform can look at GitHub and GitLab. This review is based on public sources and includes no direct performance comparison.

Screenshots

Hero product image from the official Bitbucket page
Hero product image from the official Bitbucket page
Security and permissions image from the official page
Security and permissions image from the official page
Bitbucket Cloud features image published by Atlassian
Bitbucket Cloud features image published by Atlassian

Plans & pricing

Prices last verified Nov 11, 2026

Free

Business

Free

Per the pricing page: up to 5 users, unlimited private repositories, 50 build minutes per month, 1 GB total workspace storage and 1 GB Git LFS. Community support only.

Standard

Business

$3.65/mo/user

$3.65 per user per month per the pricing page. Unlimited users and workspace storage, 2,500 build minutes per month, 5 GB Git LFS and Standard support. Extra 1,000 build minutes cost $10/month.

Premium

Business

$8/mo/user

$8 per user per month per the pricing page. Adds enforced merge checks, IP allowlisting, deployment permissions, required two-step verification and a 99.9% uptime SLA; 3,500 build minutes per month, 10 GB Git LFS and Premium support.

Free plan limits
Up to 5 users; 50 build minutes per month; 1 GB workspace storage and 1 GB Git LFS; community support only.
Free trial
No free trial
Cancellation & refunds

The pricing page states no refund policy. Standard and Premium have a free-trial button, but the trial length is not stated.

Privacy

Atlassian's privacy policy lists account, payment and usage information as collected data, plus cookies and tracking technologies. It says Atlassian acts as a controller for its own data practices and as a processor for customer data under a Data Processing Addendum. Depending on local law, users can request access, deletion or a portable copy. Atlassian also states it uses de-identified, aggregated data to improve its services.

Official pricing page

Bitbucket alternatives

Controversies & incidents

Issues documented by the press, regulators, courts or the vendor itself. Every item is sourced; unproven claims are labelled as allegations. Last researched: Nov 11, 2026

  • Low impactResolvedOutage ·

    January 2026 incident degraded the web app and APIs

    Per Atlassian's postmortem, Bitbucket Cloud's web app and public APIs were degraded for about 1 hour 36 minutes, and some customers could not load the dashboard.

    Read the full account

    Atlassian said unexpected load on a public API caused long-running database queries, degrading performance between 15:28 and 17:04 UTC on 7 January 2026. The postmortem says Git operations over SSH and HTTPS were not affected, although the status page lists both among the affected components. Listed follow-ups are better rate limiting and caching, stricter limits on specific public APIs, and query optimisation.

    Vendor response

    Atlassian published a postmortem on 30 January 2026 with remediation items.

    Sources:Bitbucket status incident (2026-01-07)

  • Medium impactConfirmedOutage ·

    Multi-hour Bitbucket Cloud outage on 21 January 2025

    Per The Register, Bitbucket Cloud went down from about 15:30 UTC on 21 January 2025, affecting the website and Git hosting; Atlassian reported services operational again at 20:08 UTC.

    Read the full account

    The Register reported that Atlassian's status page called the service "hard down", citing a saturated Bitbucket database that affected all operations. The cause was identified and mitigated by 18:02 UTC; at 19:28 UTC most services were back but Pipelines was still degraded, and at 20:08 UTC Atlassian said Git, web, API and Pipelines were operational. Microsoft said the outage also hit its Visual Studio App Center.

    Vendor response

    An Atlassian spokesperson told The Register that Bitbucket "experienced a temporary outage that impacted some Cloud customers" and was back online.

    Sources:The Register (2025-01-21)

  • Medium impactResolvedSecurity ·

    Critical CVE-2022-36804 flaw in Bitbucket Server and Data Center

    Atlassian disclosed a critical command-injection flaw in its self-hosted editions; in September 2022 CISA listed it as actively exploited. Bitbucket Cloud was not affected.

    Read the full account

    Atlassian's 24 August 2022 advisory says several API endpoints in Bitbucket Server and Data Center 7.0.0 to 8.3.0 had a command-injection flaw: anyone with read access to a repository, including a public one, could run arbitrary code with a crafted HTTP request. Atlassian rated it critical and said Atlassian Cloud sites were not affected. Per The Hacker News, CISA added CVE-2022-36804 to its Known Exploited Vulnerabilities catalog on 30 September 2022, and GreyNoise reported in-the-wild exploitation attempts on 20 and 23 September.

    Vendor response

    Atlassian shipped fixed releases for the 7.6, 7.17, 7.21, 8.0, 8.1, 8.2 and 8.3 lines and offered a partial workaround, disabling public repositories, which it said would not stop an attacker with a user account.

    Sources:Atlassian security advisory (2022-08-24)The Hacker News (2022-10-01)

Show 2 more
  • Low impactResolvedOther ·

    Atlassian ended Mercurial support on Bitbucket Cloud

    Atlassian announced on 21 April 2020 that it would end Mercurial support; users had to convert to Git or move elsewhere.

    Read the full account

    Atlassian said Git had become the default system and that supporting two split its focus. It cited a Stack Overflow survey showing about 90% of developers use Git and about 3% use Mercurial, and said fewer than 1% of new Bitbucket users chose Mercurial. New repositories could not be created from 1 February 2020, repositories became read-only on 1 July 2020, and an update dated 26 August 2020 says all hg repositories were disabled.

    Vendor response

    Atlassian advised converting repositories to Git with hg-fast-export or hg-git, or using third-party Mercurial hosting.

    Sources:Atlassian blog: Sunsetting Mercurial supportBitbucket Cloud end-of-support announcements

  • Low impactResolvedSecurity ·

    Git ransom campaign hit Bitbucket, GitHub and GitLab accounts

    In May 2019 attackers used leaked credentials to wipe repositories on all three services and demand 0.1 BTC; the three companies said they found no sign their platforms were compromised.

    Read the full account

    Per the joint report GitHub published on 14 May 2019, attackers logged in with valid passwords, app passwords, API keys and tokens, overwrote repositories with a ransom note and erased commit history; the activity stopped on 2 May 2019. The leaks were traced to sources outside the platforms, including a public credential dump (about a third of affected accounts) and exposed .git/config files. Dark Reading put the total at more than 1,000 developers across the three services; Atlassian declined to say how many Bitbucket users were affected and blamed password reuse.

    Vendor response

    Atlassian notified affected users, suspended or reset their accounts, invalidated credentials in the leaked dump and helped restore repositories; it also pointed to Premium options to require two-step verification and restrict access by IP.

    Sources:GitHub blog: Git ransom campaign incident reportDark Reading (2019-05-07)

Frequently asked questions

Is Bitbucket free?

Yes. A Free plan covers up to 5 users with 50 build minutes per month and 1 GB storage, per the official pricing page.

Does Bitbucket still support Mercurial?

No. Atlassian announced on 21 April 2020 that it was ending Mercurial support on Bitbucket Cloud; an update dated 26 August 2020 says all hg repositories were disabled.

Does Bitbucket integrate with Jira?

Yes. The pricing page describes creating branches from issues, viewing development and deployment info, and automatic issue transitions.

Can I self-host Bitbucket?

Yes, through the self-hosted Data Center edition listed on the product page. Bitbucket Cloud is hosted by Atlassian.

Review evidence & sources14

Scores

Ease of use
7.5
Why this score

Pipelines is configured with one YAML file and links natively to Jira, which eases onboarding for Atlassian teams. Users rate it 4.6/5 on Software Advice. Only an English interface was verified.

Features
8.0
Why this score

Per the product page: Git hosting, pull requests, CI/CD, package registry, merge checks, granular permissions and AI features. Premium adds IP allowlisting and required two-step verification.

Value for money
8.0
Why this score

Standard at $3.65 and Premium at $8 per user per month include 2,500–3,500 build minutes. The Free plan is tight (5 users, 50 minutes), so it only suits very small teams.

Performance
6.5
Why this score

Bitbucket Cloud was down from about 15:30 to 20:08 UTC on 21 Jan 2025 due to a saturated database (per The Register), and on 7 Jan 2026 the web app and APIs were degraded for about 1 hour 36 minutes per Atlassian's postmortem. Premium carries a 99.9% uptime SLA. No independent latency data was found.

Support
7.0
Why this score

Per the pricing page, Free gets community support only, while Standard and Premium get support at their own tier. Official docs and public end-of-support notices exist. Chat or phone channels could not be verified.

Privacy & security
7.0
Why this score

Atlassian's policy sets out data collected, user rights and its processor role under a DPA, and says de-identified data is used to improve services. In 2019 attackers used credentials leaked elsewhere to wipe repositories and demand ransom, but Atlassian, GitHub and GitLab said they found no evidence their platforms were compromised. No confirmed Bitbucket Cloud data breach was found.

What users say

Sources

Specs & compatibility
Developer
Atlassian
Headquarters
Australia
Launched
2008
Category
Development

Capabilities

  • Real-time collaboration
  • Integrations
  • Public API
  • Self-hostable

Platforms

  • Web

Interface languages

  • English

Integrations

  • Jira
  • Bitbucket Pipelines
  • Rovo Dev
  • Remote MCP Server (beta)

Support

  • Help center
  • Community forum

Change history

  1. Update.Bitbucket Cloud's web app and APIs were degraded for about 1 hour 36 minutes; some customers could not load the dashboard.
  2. Update.Bitbucket Cloud went down from about 15:30 to 20:08 UTC due to a saturated database, per The Register.
  3. Update.Atlassian disclosed critical flaw CVE-2022-36804 in Bitbucket Server and Data Center and released fixes.
Full change history (8)
  1. Limits.Atlassian announced the end of Mercurial support; hg repositories became read-only from 1 July 2020.
  2. Limits.Creating new Mercurial repositories on Bitbucket Cloud was disabled.
  3. Feature.Bitbucket added Git Large File Storage (LFS) support.
  4. Company.Atlassian acquired Bitbucket.
  5. Launch.Bitbucket launched as an independent startup founded by Jesper Nøhr.
About the author

Reviews & comments

Written by readers with a verified email address.

No reviews yet. Have you used Bitbucket? Share your real experience.

Reader reviews are counted separately and do not affect the Editorial Team’s score.

No comments yet. Be the first to share your experience.

Comments are readers’ opinions, not content from the AppDuo Editorial Team.