Skip to contentBlog
Newest · Diagrams and math · · 13 min readConfluence Excalidraw: 12 Apps and Where Your Drawing LivesFour ways to get Excalidraw into Confluence Cloud, and all 12 Marketplace apps side by side: installs, the yearly price for 50 and 500 users, the permissions each one asks for, and where each keeps your drawing when you copy, export or uninstall.Leave and team time
All 18 posts
- How to Track Team Vacations in Jira: A Complete Guide
- Best Practices for Team Leave Policies in Distributed Teams
- Confluence Team Availability: Keeping Documentation Teams in Sync
- Setting Up Half-Day and Partial Leave Policies in Jira
- OutSync vs. Teamployees: HR Hub or Sprint-Planning Tool?
- OutSync vs. Vacation Manager for Jira: A Cloud-Native Comparison
- OutSync Standard vs. Advanced: Which Edition Does Your Team Need?
- How to Log Leave for Contractors Without an Atlassian Account
- Why HR Leave Trackers Don't Help Sprint Planning
- 7 Jira Leave & Vacation Tracking Apps Compared (2026)
- OutSync vs. Out of Office Automation for Jira: Which One Do You Need?
- How to Sync Google Calendar with Jira for Team Availability
- The Ghost Resource Problem: Why Sprints Plan Around People Who Are Out
Secrets and security
All 35 posts
- Why Telling Developers Not to Commit Secrets Doesn’t Work
- The Environment Variable Attack Surface: /proc to Containers
- Preventing Sensitive Data Leaks in Confluence and Jira
- From Entropy to LLMs: What the Research Says About Detecting Secrets
- SOC 2 and Your Confluence/Jira Data: What Auditors Actually Look For
- Twelve-Factor Config Research — and Its Blind Spot for Secrets
- AI Coding Assistants and the Secret-Sprawl Curve
- Data Egress Is the Hidden Risk in Atlassian Security Apps
- Deleting a Leaked Secret Does Not Revoke It
- GitHub Secret Scanning vs Jira Secret Scanning
- How Secret Sentinel Detects Secrets: An Open Methodology
- Jira Secret Scanner: An Admin Evaluation Checklist
- How to Build a Jira Security App Approval Case
- Per-Secret Encryption Makes Git Reviews Safer
- Why Private Repositories Still Leak Secrets
- The Secret Lifecycle Your Jira Workflow Is Missing
- Secret Scanner Accuracy: Precision Is Not Enough
- Secrets in Jira Issues: What the Research Found
- A Secrets Manager Does Not Stop Secret Sprawl
- How to Test Secret Detection Without Live Credentials
- A Two-Layer Secret Defense for Git and Atlassian
- Why Training Alone Does Not Prevent Secret Leaks
- Zero Trust Stops at the Confluence Page
- Common Types of Leaked Credentials (and the Fastest-Growing One)
- Why .env Files Are a Security Risk — Even After You Delete Them
- Offboarding: The Access Nobody Remembers to Revoke
- How to Prevent Credential Leaks in Confluence and Jira
- A Practical Guide to Rotating Credentials After a Leak
- What to Check Before Installing an Atlassian Marketplace App
- How to Revoke OAuth2 Access in Atlassian Cloud
Jira, JSM and the Marketplace
All 8 posts