It would be good if Bitbucket (or the Atlassian Cloud suite) supported header insertion to make sure only authorized domains could access their instances, such as google does with https://knowledge.workspace.google.com/admin/security/block-access-to-consumer-accounts#confignetwork