JIRA can also be run on your own servers and then you can do whatever IP whitelist you want in front of it, or just not put it on the public internet at all and

JIRA can also be run on your own servers and then you can do whatever IP whitelist you want in front of it, or just not put it on the public internet at all and require VPN...