Scan JIRA and Confluence for words in body text and/or attachments

Scott Bernstein

Is anyone aware of a script, plugin, or 3rd party tool that would scan the Atlassian database (and file attachments) for security risks like passwords, connection strings, and other secrets that someone may have inadvertently entered into JIRA and Confluence?

Stephen Sifers

Hello Scott,

What I am understanding is that you are look for a Data Leak Prevention (DLP) or Personal Identifiable Information (PII) plugin for Jira and/or Confluence.

The market place is a good place to start, searching for DLP turns up nothing. However searching for Personal Identifiable Information (PII) does yield results. Market Place Search Results.

An alternative would be to query the API for both Jira and Confluence and create your own search and filters. This would require a lot of lead time but would allow you to customize your searches and filters to you exact requirements. Here are the API documents for Jira and Confluence:

Jira REST APIs (server)

Confluence Server REST API (server)

I hope you find this helpful, let us know if you need further information.

-Stephen Sifers