Securely for Jira () HAR Cleaner Compliance Automation Free

The default setup works nicely. We're using it on our support JSM and sometimes we ask our customers to provide HAR files and Securely comes in handy.

This app is a game changer for anyone who needs to handle HAR files on their Jira issues or JSM tickets! It cleans up all HAR files, making sure no sensitive information is included. You can easily customize how you want the files to be sanitized, but we've found that the standard configuration works well for us. The team is helpful, quick to assist with anything you need. And very open for improvement suggestions!

Tried this out today and the setup on it is super easy! It automatically cleans any new HAR files attached on your instance without you setting anything up at all. I really like that there is basically no room for human error during the HAR upload. Every HAR file is cleaned without exception, which is what you want. You do have to make sure you are configured cleaning the right content for your app, but the app can't be expected to predict your query string params! For example, looking through my first one, I added session.token and jwt in the Securely config. It's pretty flexible too - you can decide which request and response headers should be removed, which request and response bodies, which query string params, etc. All the bases are covered. And we're still under the 10 user limit so it doesn't matter yet, but as we grow it doesn't hurt that the app is free for everyone. This app is a great service to the Jira community!

Very useful for reducing risk.

If you do support using JSM and regularly get HAR files, then this app is a STRONG recommendation. HAR files often contain sensitive information like session cookies and passwords. Following the attacks against the support systems at Okta, where attackers got a hold of these files and subsequently attacked Okta's customers, this attack vector has been on our minds. This app can help defend against exactly that type of attack by sanitizing the HAR files of the fields that may contain sensitive data. The vendor has even gone above and beyond by implementing fine-grained controls over what is removed and what is kept to minimize the impact on the usefulness for support that these files have. And all of this for free and with zero data sent outside of the Atlassian! I would give more stars if I could and you should probably be using this app today.