Secret Scanner monitors every Jira issue and comment in real-time. The moment a credential, API key or personal data is detected, the issue gets labeled, flagged and logged — all inside Atlassian's infrastructure.
From real-time scanning to scheduled audits, Secret Scanner handles the full lifecycle of credential exposure.
Scans every issue creation, update and comment the moment it happens. No polling, no delay — triggers fire within seconds.
Applies SECURITY-RISK and PII-EXPOSED labels instantly. When secrets are removed, labels automatically switch to -RESOLVED.
Run a full-workspace background scan to find secrets in existing issues. Auto-paginated in batches to stay within Atlassian's execution limits.
Every detection is logged with timestamp, issue key, rule name, match count and action taken. Configurable retention up to 1000 events.
Add your own regex patterns to detect company-specific secrets, internal tokens or proprietary formats. Override built-in rules if needed.
Automate periodic scans: every hour, daily, weekly or on a custom N-hour/N-day interval. Configure the start hour for off-peak execution.
No servers to configure, no webhooks to set up. Install once and protection is immediate.
One-click install from the Atlassian Marketplace. The app connects to your Jira workspace with read/write permissions — no external configuration needed.
Every issue and comment is scanned the moment it's created or edited. The regex engine checks for 10+ built-in patterns covering AWS keys, GitHub tokens, private keys, credit cards and more.
Found a secret? The issue is labeled, a warning comment is posted for the team, and the detection is added to the audit log. Auto-resolves when the secret is removed.
Step through a real detection flow — from a Jira issue with exposed credentials to a labeled, alerted, resolved ticket.
Configuring AWS production environment for the new ECS cluster. Use the following credentials for initial bootstrap — please rotate after first deploy.
cc: @devops-team for review
The app is completely free while we're in the launch phase. A free tier and a Pro plan will be introduced later — early installers keep all features.
What's coming after launch: