# LeakRadar for Jira and Confluence (by Radrly)

> LeakRadar by Radrly is a Jira and Confluence Cloud app (Atlassian Forge) that finds leaked secrets (API keys, passwords, tokens) and personal data inside Atlassian, helps triage them with AI that runs inside Atlassian, and keeps signed evidence.

## Key facts

- Name: LeakRadar, also written "LeakRadar for Jira and Confluence" or "LeakRadar by Radrly". Publisher: Radrly (https://radrly.com/).
- Products: Jira Cloud and Confluence Cloud. Requires Jira Cloud; Confluence Cloud on the same site uses the same licence. Distributed through Atlassian Marketplace: https://marketplace.atlassian.com/apps/1120170598/leakradar-secret-pii-scanner-for-jira-and-confluence
- Scans Jira work items (summaries, descriptions, comments, field history, attachments) and Confluence pages and blog posts (comments, older versions, attachments), including text in images and scanned PDFs (OCR).
- Detects API keys, cloud, code, CI and AI provider tokens, passwords, private keys, connection strings and personal data (card numbers, IBAN and SWIFT, national IDs from 13 countries, health identifiers, passport MRZ lines): 63 built-in detectors plus custom detectors.
- Runs on Atlassian (Forge) with zero egress: no external hosts, no Forge Remote, no web triggers. AI triage uses Forge LLMs inside Atlassian and sees detected values only as placeholders.
- Never stores a full secret or personal data value: only a masked snippet, a per-install HMAC fingerprint and the location.
- Triage with owners, due dates and SLAs; remediation playbooks, assisted redaction, Confluence version purge, auto-remediation policies (opt in); DSAR lookup and erasure workflow to support data subject requests (not legal advice).
- Editions: Standard and Advanced. Advanced adds the Rovo agent, signed and recurring evidence packs, real-time critical alerts, up to 100 custom detectors, OCR with no monthly cap and retention up to 7 years.
- Cannot check whether a secret is still active at its provider (that would need egress): rotate every confirmed secret.

## Product

- [Overview](https://leakradar.radrly.com/): features, editions and requirements.
- [FAQ](https://leakradar.radrly.com/#faq): what LeakRadar is, who makes it, detection, data residency, GDPR, installation.
- [Atlassian Marketplace listing](https://marketplace.atlassian.com/apps/1120170598/leakradar-secret-pii-scanner-for-jira-and-confluence): install LeakRadar on a Jira Cloud site.
- [Documentation](https://leakradar.radrly.com/docs/): install, configuration, editions, Rovo agent, FAQ.
- [Release notes](https://leakradar.radrly.com/release-notes/): version history.
- [Video tour (YouTube)](https://www.youtube.com/watch?v=vEgpJK1DPEo): LeakRadar for Jira and Confluence in under two minutes.

## Trust and legal

- [Security](https://leakradar.radrly.com/security/): Forge scopes, data residency, zero egress.
- [Privacy Policy](https://leakradar.radrly.com/privacy/)
- [End User License Agreement](https://leakradar.radrly.com/terms/)
- [Data Processing Agreement](https://leakradar.radrly.com/dpa/)
- [Support](https://leakradar.radrly.com/support/): support@radrly.com, Monday to Friday 09:00 to 17:00 CET/CEST, first response within 1 business day.

## Optional

- [Radrly](https://radrly.com/): the company behind LeakRadar and all Radrly apps.
- [Radrly Partner Program](https://radrly.com/partners/): for Atlassian Solution Partners.
- [App status](https://radrly.com/status/)
- [Full text for LLMs](https://leakradar.radrly.com/llms-full.txt): overview and docs as Markdown.