Bitbucket charges a lot more money to have visibility into organizaton user's 2FA status. Their API however exposes the feature. This is a serverless function to check all users of a given org and send an alert if any do not have 2FA enabled. - View it on GitHub