OVERALL RATINGS
INSTALLS
54
SUPPORT
- Partner Supported
TRUST SIGNALS
Key highlights of the appSecurity scanner for leaked credentials: finds and redacts passwords, API keys and tokens in Jira issues and comments
Redacted the moment it is posted
When someone pastes a key into a summary, description or comment, it is replaced by a marker that names the type and shows only its first and last characters. Formatting stays intact.
A security incident for every real leak
Open a work item in your security project with priority, assignee and labels — where the leak was and which types, never the secret itself. Rules per credential type and severity.
Tuned to your organization
Change severity per credential type, choose which open incidents, exclude test projects, never flag known safe values. Advanced: your own patterns and a compliance dashboard.
Supporting media
Editions
This app offers two different editions - Standard and Advanced. You can start a free trial of either edition, and change your edition anytime during or after the trial.
Standard
Onboard your team and scale fast
Includes:
Automatic secret detection & redaction
Broad secret type coverage
Security incident escalation
Severity & escalation rules
Per-value allowlist
Advanced
Unlock the full range of app features
Everything from Standard, plus:
Custom regex detection rules
Compliance dashboard
More details
- Scans issue summaries, descriptions and comments (also edited ones) when they are created or changed
- 50+ credential types via secretlint rules: AWS, GCP and private keys, GitHub/GitLab, Slack, Stripe, AI services, database URLs, plus password=/token=/api_key= assignments and JWTs
- Redacts in place; only first/last 4 characters shown; formatting, tables and code blocks kept
- Severity High / Medium / Low, adjustable per type
- Optional Jira security incidents; rules per type; exclude projects
- Ignored values stored as SHA-256 only
- Advanced: custom RE2 patterns, compliance dashboard
Redaction changes the current version; Jira keeps history — rotate any leaked credential. Runs on Atlassian Forge: everything stays inside your Atlassian site, no external calls.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Secret Sentinel: Password & API Key Leak Scanner for Jira integrates with your Atlassian app
Version information
Version 2.10.0•for Jira Cloud
- Release date
- Oct 21st 2026
- Summary
- Minor version update
- Details
Minor version update
- Payment model
- Paid via Atlassian
- License type
- Commercial