Is Canned Responses Pro for Jira safe?

Medium risk

Canned Responses Pro for Jira starts LogRocket session replay on Jira pages and sends Atlassian account and license metadata.

When active on scoped Jira and Atlassian pages, the extension loads LogRocket's logger and captures page activity such as DOM content, form input, URLs, page titles, and stored data. It also identifies the user to LogRocket with Atlassian account ID plus client, license, entitlement, evaluation, device, version, and Jira base URL details.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Spartezv3.1.1Chrome Web Store
40Risk
Who publishes it

Appfire - no other listings under this identity, 8 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Spartez
Declared legal entity
Appfire
Registered address
Bernarda Chrzanowskiego 11, Gdańsk 80-278, PL
Registered contact
Spartez Software Systems Sp. z o.o.

Shared hosts - 8 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api-private.atlassian.com
Also called by 4 other listings, including Smart Terms for Confluence and Jira
api-private.dev.atlassian.com
Also called by 4 other listings, including Smart Terms for Confluence and Jira
ishadeed.com
Also called by 4 other listings, including Smart Terms for Confluence and Jira
pug.jira-dev.com
Also called by 4 other listings, including Smart Terms for Confluence and Jira
fpnpmcdn.net
Also called by 5 other listings, including Viking Deals, Branalyzer Brand's Instant Analyzer
smart-links-cdn.us-east-1.prod.public.atl-paas.net
Also called by 5 other listings, including E2T
dt-api-filestore--app.ap-southeast-2.dev.atl-paas.net
Also called by 6 other listings
schema.atlassian.com
Also called by 6 other listings, including E2T

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Canned Responses contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • r.lr-in-prod.com

    Canned Responses sends data to r.lr-in-prod.com. No other extension we have analysed sends data here.

Updated 30 September 2026abiklfpogpkkcelofcplnokkehjgmchc