Looking for a plugin to automatically scan & mask phone numbers / emails / passwords in Jira

[Ayush Pathak]

Hi all — we need help choosing a plugin for Jira (Cloud) that can:

1. Automatically scan issues, comments and attachments (including text within documents/images if possible) for sensitive data — phone numbers, emails, passwords, API keys, credit-card-like numbers, etc.

2. Mask or redact detected values in-place (or replace with a token), with the ability for authorized admins to unmask for troubleshooting (audit / access log required).

3. Support automated remediation (e.g., notify admin, remove attachment, trigger a workflow) and run historical scans across existing issues.

4. Work with Jira Cloud (please mention Data Center support if available) and have a reasonable cost for enterprise usage.

We’re considering options like PII Protector, PII Protection & DLP, Nightfall AI DLP, and Soteri’s Security for Jira — but would love community feedback on:

• Which of these (or other) apps work best in practice for masking (not just detecting)?

• Experience with OCR/attachment scanning reliability?

• Setup complexity and false-positive tuning?

• Any performance or cost considerations at scale?

Thanks in advance — happy to share the specific types/formats we want to detect (sample regexes) if that helps.

[Natalia_Kovalchuk_SaaSJet_]

Hi @Ayush Pathak !

I can recommend you try Issue History for Jira by SaaSJet, which tracks all changes to Jira work items over time.

It provides the Security Scanner View (PII & DLP), which automatically scans Jira work items and their complete change history for sensitive data such as passwords, credit card numbers, social security numbers, API keys, IP addresses, usernames and logins, physical addresses and postal codes, etc.

It helps to detect current findings (sensitive data that still exists in the work item) and historical findings (sensitive information existed in the past, but is no longer visible, for example, in earlier versions of comment or description, and was later removed or updated).

Hope it will be helpful!

[Jayesh Raghuvanshi]

@Ayush Pathak 

For Masking

• Atlassian Guard Detect lets authorized analysts redact sensitive data directly from alerts, replacing content with a solid bar and supporting restoration via API within 30 days, which aligns closely with “mask/unmask with auditability” requirements for Cloud
• Nightfall supports manual redaction or deletion from alerts along with policy‑driven automated remediation, enabling practical in‑place cleanup across issues, comments, and attachments
• miniOrange “Data – PII Scanner (DLP) for Jira” explicitly provides actions to “redact or hide PII” from within the plugin findings, which satisfies mask‑in‑place use cases

For OCR & attachments

• Polymetis PII Protection & DLP explicitly detects “Text within Images & Documents,” indicating OCR coverage across images and common document formats alongside 70+ PII/secret types
• Nightfall scans issues, comments, and attachments across 100+ file types, offering wide coverage for documents and unstructured data in Cloud environment
• Soteri scans projects, issues, comments, attachments, and even issue history, providing comprehensive surface coverage even if OCR is not explicitly called out in product copy

Plugins Names

1. Atlassian Guard Detect
2. Nightfall AI DLP
3. Polymetis PII Protection & DLP
4. Soteri Security for Jira
5. miniOrange Data – PII Scanner (DLP)

Thanks
Jayes R