Security for Jira PII & Secret Scanner by Soteri

We've recently implemented Security for Jira Enhanced Secret Scanner by Soteri to help reduce the risk of credentials or secrets being shared in Jira issues. It delivers on its core promise—scanning for exposed secrets and notifying us quickly. It’s helped us catch a few potential leaks already, which made it worth the investment. The setup was simple, and integration into our Jira projects was smooth. We also appreciate that it covers both issue bodies and attachments, which many tools don't. That said, we did notice a few areas for improvement. The detection patterns could be more customizable, especially for secrets that are unique to our internal tools. Reporting and alerting options are also somewhat limited—it would be great to have more flexible integrations (e.g., native Slack or webhook support) and more detailed logs for auditing. Overall, it’s a valuable tool for any team trying to raise their Jira security baseline, but we’re looking forward to future updates that make it even more robust.

Great idea in theory, but many features are lacking to be useful. If it had a way to run across multiple projects at once, send notifications and/or exported reports, and add an identifier on tickets with security concerns., it would be wonderful.

• 

  Soteri

  Hi Alyssa! As of April 2024, we've release a Global Dashboard feature, which allows for scanning multiple projects and exports at once. We're always working to make our product better, so please reach out with any other feature requests that we can implement to earn a 4-star review from you.