Are there any utilities that I can run against my Confluence and JIRA servers, to identify Spaces and Projects that have their permissions 'open' so that anyone with a login can access them?
You could try to delete the user group confluence-users. But do not do this for real!
By default each person with a login is part of this group.
If you delete a group you will be stated, in which spaces this group has permissions. They will be listed with there abbreviations.
When you noted, which spaces this group has access to you should cancel the deletion attempt.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.