# Bastion Helix

> Independent software from Bengaluru, India: a Jira Cloud app suite that runs inside Atlassian, browser extensions for Chrome and Edge (Tables, Capture), and Agent Lens, an API and MCP server that lets AI agents read web pages responsibly. Every claim on bastionhelix.com is something the product does today.

Contact: support@bastionhelix.com. Security reports: security@bastionhelix.com.

## Products
- [Bastion Helix for Jira](https://bastionhelix.com/jira): seven Jira Cloud tools on one licence (charts, time tracking, budgets, diagrams, automation, email, Workforce Intelligence), built on Atlassian Forge. Not yet on the Atlassian Marketplace. Listed in the CSA STAR Registry (CAIQ v4.1, Level 1 self-assessment): https://cloudsecurityalliance.org/star/registry/bastion-helix
- [Bastion Helix Tables](https://bastionhelix.com/tables): Chrome and Edge extension that turns web tables into clean Excel, CSV or JSON, and hands them to AI apps. Listed in the CSA STAR Registry (CAIQ v4.1, Level 1 self-assessment): https://cloudsecurityalliance.org/star/registry/bastion-helix
- [Bastion Helix Capture](https://bastionhelix.com/capture): Chrome and Edge extension for bug reports with screenshot, errors, failed requests and steps, sent to Jira, GitHub or Linear.
- [Bastion Helix Agent Lens](https://bastionhelix.com/lens): API and MCP server at https://lens.bastionhelix.com for AI agents (free tools live, paid calls soon), plus a free browser extension for Microsoft Edge: https://microsoftedge.microsoft.com/addons/detail/bastion-helix-agent-lens/niglfdgkgjbbfbmbpaaoejcaoofehkbl . Listed in the CSA STAR Registry as a STAR for AI Level 1 self-assessment: https://cloudsecurityalliance.org/star/registry/bastion-helix Machine-readable entry points: https://lens.bastionhelix.com/llms.txt and https://lens.bastionhelix.com/openapi.json

## Docs and policies
- [Jira app documentation](https://bastionhelix.com/docs)
- [Agent Lens API documentation](https://bastionhelix.com/lens/docs)
- [Agent Lens acceptable use policy](https://bastionhelix.com/lens/acceptable-use) (plain text for agents: https://bastionhelix.com/lens/acceptable-use.txt)
- [Agent Lens crawler, for site owners](https://bastionhelix.com/lens/bot)
- [Security](https://bastionhelix.com/security)
- [Privacy policy](https://bastionhelix.com/privacy) and [Data Processing Addendum](https://bastionhelix.com/dpa)
- [Support](https://bastionhelix.com/support)

## Articles
- [Before an AI agent reads a page: four checks that keep it welcome](https://bastionhelix.com/blog/how-ai-agents-should-read-the-web): What a well-behaved AI agent checks before it reads a web page: robots.txt, Content Signals, bot checks and llms.txt, and how site owners control each one.
- [What we learned answering 886 cloud security questions as a one-person company](https://bastionhelix.com/blog/answering-the-csa-caiq-as-a-one-person-company): We answered CSA's CAIQ v4.1 for our Jira app and Tables extension and the AI-CAIQ for Agent Lens: 886 questions, 177 honest Nos. What the questionnaires are and what we'd tell the next small vendor.
- [The bug report a developer can fix on the first read](https://bastionhelix.com/blog/bug-reports-developers-can-fix): What every good bug report contains (steps, expected and actual, environment, errors, failed requests, evidence), a copy-paste template, and how to collect it all without leaking private data.
- [Copy a web table into Excel without breaking the numbers](https://bastionhelix.com/blog/copy-web-tables-to-excel): Why pasted web tables turn numbers into text and mangle dates, how Indian 1,23,456 and European 1.234,50 formats trip Excel, and cleaner ways to get the data.
- [Tracking AI spend without handing anyone your admin keys](https://bastionhelix.com/blog/ai-spend-without-handing-over-keys): Why Workforce Intelligence receives the AI usage your tools send — Claude Code telemetry, GitHub webhooks — instead of holding your vendor admin keys.
- [Why one Jira app instead of four](https://bastionhelix.com/blog/one-app-instead-of-four): Atlassian licenses every Marketplace app at your full user tier. What that does to the cost of reporting, timesheets, budgets and AI spend.
- [What “never leaves your instance” means for a Jira app](https://bastionhelix.com/blog/what-runs-on-atlassian-means): How Forge apps compute and store data inside Atlassian, what Runs on Atlassian means, and what it changes in a security review of a Jira app.
- [See Claude Code spend per person, team and Jira issue](https://bastionhelix.com/guides/claude-code-spend-per-jira-issue): Send Claude Code usage over OpenTelemetry and GitHub commits by webhook, then see AI spend by person, team and Jira issue — nothing calls out.
- [Bring your draw.io diagrams into Jira — and take them back out](https://bastionhelix.com/guides/drawio-diagrams-in-jira): Import .drawio files into Bastion Helix diagrams on a Jira project, handle compressed files, keep versions, and export back to draw.io whenever you like.
- [Earned value for Jira projects, in plain English](https://bastionhelix.com/guides/earned-value-for-jira-projects): What planned value, earned value, actual cost, CPI, SPI, EAC and TCPI mean for a Jira project — with a worked example and the health thresholds.
- [Turn a support address into Jira issues with Cloudflare Email Routing](https://bastionhelix.com/guides/email-to-jira-with-cloudflare): Route mail from your own domain into Jira with Cloudflare Email Routing and an Email Worker: each message becomes an issue, each reply a comment.
- [Cycle time, lead time and throughput in Jira: what they measure](https://bastionhelix.com/guides/jira-cycle-time-lead-time-throughput): Lead time, cycle time, throughput, time in status and cumulative flow for Jira issues: how each is calculated, and the traps that make them lie.
- [Moving from Tempo Timesheets: what comes across, and how](https://bastionhelix.com/guides/moving-from-tempo-timesheets): How a Tempo Timesheets CSV export is imported: which columns are read, how accounts and billable hours are matched, and what stays read-only.

## Optional
- [Glossary](https://bastionhelix.com/glossary)
- [Videos](https://bastionhelix.com/videos)
- [Agent Lens film (YouTube, 1:28)](https://www.youtube.com/watch?v=u4b-LRrhnIk): the extension's Verdict, Agent-ready, Safety, Live test and Code tabs, and the API and MCP server.
- [RSS feed of articles and guides](https://bastionhelix.com/blog/feed.xml)
- [Sitemap](https://bastionhelix.com/sitemap.xml)