Is Capture in Chrome for monday.com and Jira (ex. Issue Creator) safe?
Capture for monday.com and Jira sends Jira site name and usage events to the vendor's logging and license servers.
When you create issues, apply templates or take screenshots in Jira, the extension posts event logs containing your Atlassian site name and a client key to a Datadog intake, and sends a license check with your Jira URL, account ID and cloud ID to the vendor's server. It also contains an unused helper that can read the Atlassian session cookie and send it to the vendor's server, but no call to it was found in this build.
Who publishes itSaaSJet - 2 other listings from the same operator, none carrying a finding
SaaSJet - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 2k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed JTM contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- http-intake.logs.datadoghq.eu
JTM sends data to http-intake.logs.datadoghq.eu. 2 other extensions we have analysed send data here.
- tc-atlassian.saasjet.com
JTM sends data to tc-atlassian.saasjet.com. No other extension we have analysed sends data here.