Security Features
Encryption, anonymity and hardening measures that protect every report.
- Designed in adherence to ISO 27001:2022, CSA STAR, and OWASP recommendations for security compliance
- Full data encryption for whistleblower reports and recipient communications
- Supports digital anonymity through Tor integration
- Built-in HTTPS support with TLS 1.3 standard and SSLabs A+ rating
- Automatic enrollment for free digital certificates with Let’s Encrypt
- Multiple penetration tests with publicly available reports
- Two-Factor Authentication (2FA) compliant with TOTP RFC 6238
- Integrated network sandboxing with iptables
- Application sandboxing with AppArmor
- Complete protection against automated submissions (spam prevention)
- Continuous peer review and periodic security audits
- PGP support for encrypted email notifications and file downloads
- Leaves no traces in browser cache