OVERALL RATINGS
INSTALLS
66
SUPPORT
- Partner Supported
TRUST SIGNALS
- Requires
- CONFLUENCE
- Works with
- JIRA
Key highlights of the appSecurity scanner for leaked credentials: finds and redacts passwords, API keys and tokens in Confluence pages and comments
Redacted the moment it is saved
Credentials in page titles, bodies and comments are replaced by a marker naming the type, keeping tables, macros and code blocks intact. Runbooks stay readable, keys do not leak.
Leaks become tracked incidents
With Secret Sentinel for Jira on the same site, a leak opens a security work item: which page and which credential types, never the secret. Exclude test spaces.
Tuned to your organization
Severity per credential type, which types open incidents, ignored safe values. Advanced adds your own patterns and a compliance dashboard.
Supporting media
Editions
This app offers two different editions - Standard and Advanced. You can start a free trial of either edition, and change your edition anytime during or after the trial.
Standard
Onboard your team and scale fast
Includes:
Automatic secret detection & redaction
Broad secret type coverage
Jira incident escalation
Severity & escalation rules
Per-value allowlist
Advanced
Unlock the full range of app features
Everything from Standard, plus:
Custom regex detection rules
Compliance dashboard
More details
- Scans page and blog titles and bodies, footer and inline comments when they are created or edited
- 50+ credential types via secretlint rules plus password=/token=/api_key= assignments and JWTs
- Redacts in place; tables, macros and code blocks kept
- Severity per type; optional Jira security incidents (needs Secret Sentinel for Jira on the same site); exclude spaces
- Ignored values stored as SHA-256 only
- Advanced: custom RE2 patterns, compliance dashboard
Confluence keeps page history — rotate any leaked credential; space admins can delete old versions. Runs on Atlassian Forge: everything stays inside your Atlassian site, no external calls.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Secret Sentinel: Password & API Key Scanner for Confluence integrates with your Atlassian app
Version information
Version 4.3.0•for Confluence Cloud
- Release date
- Oct 21st 2026
- Summary
- Minor version update
- Details
Minor version update
- Payment model
- Paid via Atlassian
- License type
- Commercial