GlobaLeaks

GlobaLeaks is an open-source, self-hosted web application that provides a secure reporting platform for whistleblowing. It enables organizations to establish anonymous submission channels where individuals can report misconduct or corruption without revealing their identities. The software is designed to facilitate the secure transfer of information from a source to an organization while minimizing the digital footprint of the submitter.

The software is deployed as a server-side application. It focuses on protecting the anonymity of the submitter and the security of the communication between the whistleblower and the organization receiving the report. Organizations can maintain their own infrastructure to ensure they have full control over the data and the reporting process, which is essential for maintaining the integrity of sensitive investigations.

Key features

• Anonymous submission channels for whistleblowers
• Secure reporting infrastructure for organizations
• Integration with Tor for enhanced anonymity
• Use of libsodium for cryptographic operations
• Support for Debian based deployments
• Compliance with Digital Public Good Alliance standards
• AGPLv3 licensing to ensure software freedom
• Built-in mechanisms for secure communication

The technical stack utilizes Python and Twisted for the backend, with SQLAlchemy for database management. The frontend is built using Angular, TypeScript, and Bootstrap, while DOMPurify is employed to maintain security against cross-site scripting. The architecture is designed to prioritize digital human rights and anti-corruption efforts by providing a technical framework for secure leaks. The project is community-driven and maintains a focus on accessibility and security through continuous integration and testing metrics.

GlobaLeaks serves as a digital public good for organizations requiring a dedicated, privacy-focused system for internal or external whistleblowing. It is intended for use by entities that need to automate compliance and protect the identity of sources in high-risk environments.