Atlassian Rovo
Shares rank 20 of 26 AI assistants by recommenders
People recommend Rovo for quickly summarizing and searching Jira tickets and Confluence pages. Critics mostly warn about security flaws and unreliable, intrusive output.
People recommend Rovo for quickly summarizing and searching Jira tickets and Confluence pages. Critics mostly warn about security flaws and unreliable, intrusive output.
51 people gave an opinion
- recommend it
- 8
- criticize it
- 43
- approval share
- 16%
Recommended in 5 of 13 months
- November 2025: not recommended
- December 2025: not recommended
- January 2026: recommended
- February 2026: not recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 8 people recommend itNeeds 10 or more, not met.
- 0.1 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Makes Jira tickets and pages easier to read
“Rovo is usually the only way to make any sense of tickets”
Comment from 5 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” “Rovo makes for an INCREDIBLE time reading jira tickets and confluence pages”
Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” Saves time and is helpful
“Saves me a good chunk of time.”
Comment from 5 Jun 2026 in “Programmers will document for Claude, but not for each other” “Rovo can be helpful though.”
Comment from 31 Jan 2026 in “Ask HN: Do you also "hoard" notes/links but struggle to turn them into actions?”
What people warn about
Each mark is one comment
Security flaws and unsafe URL handling
“An isolation failure in an Atlassian Rovo-orchestrated environment allowed sessions belonging to other users and tenants to be discovered, reached, and ultimately used”
Comment from 24 Sep 2026 on Hacker News “Rovo's URL retrieval tool is insecure: there are no protections against opening a URL that has been dynamically created by the agent.”
Comment from 5 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” “Rovo will also execute instructions hosted on external URls - they've known this for at least 6 months.”
Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” - Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls”
Inaccurate, invented or erroneous output
“most of it was “ticket description but as gherkin stories” which is good, but it made like 2-3 stories referencing a data structure and fields we were not planning on whatsoever”
Comment from 9 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” “the first time I did it erased a whole page - it couldn't get the most basic instruction correct”
Comment from 12 Mar 2026 in “Atlassian to cut roughly 1,600 jobs in pivot to AI” “It found three, regardless of how I queried it. I had actually written over sixty.”
Comment from 12 Mar 2026 in “Atlassian to cut roughly 1,600 jobs in pivot to AI” - Comment from 3 Feb 2026 in “Xcode 26.3 unlocks the power of agentic coding”
Injected into pages, slowing browsing
“they injected it into every single page on JIRA and Confluent which has made web browsing way slower”
Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” “injected it into every single page on JIRA and Confluent which has made web browsing way slower”
Comment from 5 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” Training opt-in by default, hard to disable
“Because it's impossible to disable it until you have a very certain, very expensive plan.”
Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls” “opted-in all customers by default for their data to be used for model training”
Comment from 6 Aug 2026 in “Atlassian Rovo Exfiltrates Data, Bypassing Controls”
Other AI assistants people recommend
The four most recommended other AI assistants, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Claude | 5,175 | 5,005 | 51% | 13 | 6 mo326 owners | — |
| Google Gemini | 2,195 | 2,236 | 50% | 13 | 6 mo98 owners | — |
| ChatGPT | 2,186 | 2,885 | 43% | 13 | 1 yr164 owners | — |
| Grok | 727 | 1,249 | 37% | 13 | 1 mo19 owners | — |
| Atlassian RovoThis page | 8 | 43 | 16% | 5 | — | — |
What people said
40 of the 57 comments that mention it, newest first. Each links to the original comment.
“An isolation failure in an Atlassian Rovo-orchestrated environment allowed sessions belonging to other users and tenants to be discovered, reached, and ultimately used”
“Attlassian projects require Rovio and this is additional payments”
“most of it was “ticket description but as gherkin stories” which is good, but it made like 2-3 stories referencing a data structure and fields we were not planning on whatsoever”
“It's complete slop. The help strings do not match the real args/flags.”
“Removing the cost from the signal makes the signal worthless”
“The part about not having guardrail against calls to external urls is wild though.”
“It's more interesting if I attach a file to a JIRA ticket that we both have access to and via some query you send to the AI”
“Rovo makes for an INCREDIBLE time reading jira tickets and confluence pages”
“So they will harvest trade secrets from 10000s of companies”
“opted-in all customers by default for their data to be used for model training”
“it retrieved a version of the page from two weeks ago and summarised that”
“Rovo will also execute instructions hosted on external URls - they've known this for at least 6 months.”
“they injected it into every single page on JIRA and Confluent which has made web browsing way slower”
“Because it's impossible to disable it until you have a very certain, very expensive plan.”
“When you go "Make shorter", the text gets longer still.”
“I couldn’t even manage to get it to write a well-formed JQL query.”
“Yet somehow they still fucked up with their own agent”
“Think about how much better it is than the joke of a search tool that's slightly to the left of it's icon.”
“intrusive AI buttons that suddenly appeared everywhere without any warning”
“Rovo is usually the only way to make any sense of tickets”
“The web search setting does not disable web search.”
“And you're pretty much screwed if you link it to Google Docs or Sharepoint.”
“Yes, a built-in feature to type some text in, and the use the mighty power of AI to bloat it.”
“It's nice they force rovo now for document/version diff's.”
“injected it into every single page on JIRA and Confluent which has made web browsing way slower”
“Rovo's URL retrieval tool is insecure: there are no protections against opening a URL that has been dynamically created by the agent.”
“no one wants Rovo, we want to use the LLMs we choose”
“their internal push on Rovo has shown in their product”
“the sheer verbosity and the fact it's clearly generated just makes you not want to engage with it”
“they can be surprisingly convenient and make up for UI/UX learning curves”
“Saves me a good chunk of time.”
“Atlassian is getting ready to just ditch Rovo”
“It's a bit shit they way they sell it as metadata.”
“did not do a good job of not going to external sources when we had the answer in our existing internal docs”
“AI search tools like Glean and Rovo have improved the discoverability”
“It's absolutely atrocious! Rather than make you faster it's a complete time sink.”
“the first time I did it erased a whole page - it couldn't get the most basic instruction correct”
“It found three, regardless of how I queried it. I had actually written over sixty.”
“invents events/meetings and notes when it tries to summarize a tree of documents”
“Rovo can be helpful though.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.