PermPilot: Page Access & Permission Auditor for Confluence

PermPilot answers a question Confluence itself cannot: who can actually see and edit every page?

It is a Forge app with no external egress, so page titles and permission data never leave your Atlassian tenant. That is why it qualifies for the Runs on Atlassian programme and why it can usually clear a security review without a data processing agreement.

The audit is read only. There is also an optional fix for two of the findings: it previews every change, exports the before-state first, and runs with your own permissions, so it can never alter anything you could not alter yourself.

Findings export to CSV for SOC 2 and ISO 27001 access reviews.