Warden - Access Audit for Confluence

Confluence Cloud gives you no way to see, across every space, which pages are restricted and to whom — so access drift hides until an audit finds it.

Warden inventories every view/edit-restricted page in one report: who can view or edit, and whether the restriction sits directly on the page or is inherited from an ancestor. It then flags the restrictions that quietly break access governance: a page restricted to a DEACTIVATED user; a restriction pointing at an EMPTY group; an ORPHANED restriction, where the user or group no longer exists; and a STRANDED page, where every principal granted view or edit is dead, so the intended audience is locked out.

Every rescan is diffed against the previous one, so you see what changed instead of re-reading the whole inventory. Export it as CSV for your access reviews.

Read-only: Warden reports the current state and never changes a restriction. Runs on Atlassian — no external servers, no egress.