Skip to content
SPECIFICTION
Get listed

GlobaLeaks

globaleaks.org

Free plan Open source WebLinuxAPISelf-hosted
Visit globaleaks.org
Spec score 8.7 #1 of 27 in Whistleblower Hotline Software

What it is

GlobaLeaks is free, open-source software for organizations setting up and maintaining a whistleblowing platform. It supports anonymous two-way messaging, file exchange, configurable reporting channels, labels, and case statuses. Administrators can create multi-step questionnaires to structure submissions and manage the system through a web interface; one installation can host multiple virtual whistleblowing sites. The software encrypts reports and communications with recipients, supports Tor, and states that it does not log IP addresses. Listed controls include TLS 1.3, two-factor authentication, AppArmor, network sandboxing, and PGP for email notifications and file downloads. The project says it has received independent security audits since 2011 and publishes the reports. GlobaLeaks documents Debian and Ubuntu Linux support, package updates, and Docker installation. The default file attachment limit is 30MB, though administrators can configure it higher. It lists support for more than 90 languages, right-to-left languages, and WCAG 2.2 accessibility recommendations. Its intended users include independent media, activists, public agencies, corporations, and other organizations.

Spec sheet

What it does
GlobaLeaks is free open-source software for creating secure whistleblowing platforms.Read 15 Oct 2026 · globaleaks.org
Purpose
GlobaLeaks is free, open-source software for setting up and maintaining a secure whistleblowing platform.Read 3 Oct 2026 · globaleaks.org
Intended users
The maker describes use by independent media, activists, public agencies, corporations, and other organizations.Read 3 Oct 2026 · globaleaks.org
API
GlobaLeaks exposes a REST API.Read 15 Oct 2026 · docs.globaleaks.org
Integrations
The software supports integration with enterprise case-management platforms and existing websites.Read 15 Oct 2026 · docs.globaleaks.org
Compliance
The maker says the platform is compliant with ISO 37002, EU Directive 2019/1937, and GDPR, and designed in adherence to ISO/IEC 27001:2022.Read 3 Oct 2026 · globaleaks.org
Support
The project directs users to documentation, FAQs, GitHub ticketing, a forum and community chat.Read 15 Oct 2026 · github.com
Administration
The platform is managed through a web interface and supports multiple virtual whistleblowing sites on one setup.Read 3 Oct 2026 · globaleaks.org
Adoption
The project says it is used by more than 30,000 organizations worldwide.Read 15 Oct 2026 · globaleaks.org
Anonymous reporting
Whistleblowers receive a unique 16-digit receipt for anonymous report access.Read 15 Oct 2026 · docs.globaleaks.org
API documentation limit
A project discussion states that API documentation was evolving, no Swagger specification was available, and the team lacked dedicated resources for it at that time.Read 15 Oct 2026 · github.com
Attachment limit
The default attachment limit is 30 MB per file, but administrators can raise it to a virtually unlimited size.Read 15 Oct 2026 · globaleaks.org
Audit history
GlobaLeaks says independent security audits have been conducted since 2011 and published in full.Read 15 Oct 2026 · globaleaks.org
Audits
The project says it has undergone independent security audits since 2011 and publishes the reports in full.Read 3 Oct 2026 · globaleaks.org
Case management
Reports can be labeled and assigned customizable case statuses and sub-statuses.Read 15 Oct 2026 · docs.globaleaks.org
Changelog: version 5.0.0
Version 5.0.0 introduced a full client rewrite using Angular 18 and Bootstrap 5.Read 15 Oct 2026 · github.com
Compliance claims
The project says it is designed around ISO 37002, EU Directive 2019/1937, GDPR and ISO/IEC 27001:2022 recommendations.Read 15 Oct 2026 · globaleaks.org
Documentation depth
Documentation covers installation, initialization, backup, reporting, administration, requirements, security, development, packaging and continuous integration.Read 15 Oct 2026 · docs.globaleaks.org
Encryption
Reports, attachments, messages and metadata are encrypted with per-user and per-report keys.Read 15 Oct 2026 · docs.globaleaks.org
Encryption and anonymity
The software encrypts reports and recipient communications, supports Tor, and states that it does not log IP addresses.Read 3 Oct 2026 · globaleaks.org
Installation
Official installation supports a verified Debian/Ubuntu script and Docker with a Linux amd64 image.Read 15 Oct 2026 · docs.globaleaks.org
Languages
The software supports more than 70 languages, including right-to-left languages.Read 15 Oct 2026 · docs.globaleaks.org
Languages and accessibility
The user features page lists support for over 90 languages and right-to-left languages; the technical features page lists WCAG 2.2 accessibility recommendations.Read 3 Oct 2026 · globaleaks.org
Licence
The software is released under the OSI-approved GNU AGPLv3 licence with additional terms requiring a Powered by GlobaLeaks footer link.Read 15 Oct 2026 · github.com
Limit: customization documentation
A Software Advice reviewer said appearance customization was not straightforward and requested more questionnaire documentation and examples.Read 15 Oct 2026 · softwareadvice.com
Limit: design and setup
The same Capterra review cited dated design and initial implementation and notification issues, though support resolved them.Read 15 Oct 2026 · capterra.com
Limit: user interface
The G2 reviewer said the user interface needs improvement.Read 15 Oct 2026 · g2.com
Maker headquarters
Whistleblowing Solutions lists its headquarters in Milan, Lombardy, Italy.Read 15 Oct 2026 · it.linkedin.com
Maker legal name
The project is hosted by Whistleblowing Solutions Impresa Sociale S.r.l., founded in 2016 to sustain GlobaLeaks development and assistance.Read 15 Oct 2026 · globaleaks.org
Messaging
Whistleblowers and recipients can exchange comments and messages anonymously.Read 15 Oct 2026 · docs.globaleaks.org
Multi-site
One installation can host multiple independently configured whistleblowing sites.Read 15 Oct 2026 · docs.globaleaks.org
Operating systems
GlobaLeaks is developed and tested for GNU/Linux, especially Debian and Ubuntu LTS releases.Read 15 Oct 2026 · docs.globaleaks.org
Praise: anonymity
The G2 reviewer praised the anonymous reporting experience and recommended it to peers.Read 15 Oct 2026 · g2.com
Praise: identity protection
A Software Advice reviewer praised protection of anonymous users and the breadth of included features.Read 15 Oct 2026 · softwareadvice.com
Praise: open-source support
A Capterra reviewer praised the cost effectiveness, open-source model and developer support through Slack.Read 15 Oct 2026 · capterra.com
Praise: value and support
GetApp reports a 4.9 value-for-money score and a 4.8 customer-support score from 12 reviews.Read 15 Oct 2026 · getapp.com
Privacy limitation
The FAQ explicitly says no product can guarantee 100% security and that residual risks remain.Read 15 Oct 2026 · globaleaks.org
Questionnaires
Administrators can build advanced multi-step questionnaires for structured submissions.Read 15 Oct 2026 · docs.globaleaks.org
Rating on Capterra
4.0 out of 5 from 1 reviewRead 15 Oct 2026 · capterra.com
Rating on G2
4.0 out of 5 from 1 reviewRead 15 Oct 2026 · g2.com
Rating on GetApp
4.6 out of 5 from 12 reviewsRead 15 Oct 2026 · getapp.com
Rating on Software Advice
4.6 out of 5 from 12 reviewsRead 15 Oct 2026 · softwareadvice.com
Release process
The roadmap targets major releases twice yearly, with additional minor updates and immediate critical security patches.Read 15 Oct 2026 · docs.globaleaks.org
Reporting workflow
It supports anonymous two-way messaging, file exchange, report labels, case statuses, and configurable reporting channels.Read 3 Oct 2026 · globaleaks.org
Security controls
Security features include TLS 1.3, 2FA using TOTP, iptables and AppArmor sandboxing, PGP notifications and spam protection.Read 15 Oct 2026 · docs.globaleaks.org
Supported deployment
The maker documents Linux Debian and Ubuntu support, Debian package updates, and a Docker installation option.Read 3 Oct 2026 · docs.globaleaks.org
System requirements
The documented baseline is a 64-bit dual-core 2.0 GHz CPU, 1 GB RAM, 20 GB storage and shared 10 Mbit/s I/O.Read 15 Oct 2026 · docs.globaleaks.org
Tor anonymity
Tor integration is used to protect whistleblower network anonymity, including automatic Onion Service setup.Read 15 Oct 2026 · docs.globaleaks.org
User roles
It provides configurable roles for whistleblowers, recipients and administrators.Read 15 Oct 2026 · docs.globaleaks.org

Plans and prices

Free Whistleblowing Software Free free and open source software Read 15 Oct 2026 · g2.com
GlobaLeaks Free Free open-source software; self-hosted; default attachment limit 30MB per file, configurable higher Read 3 Oct 2026 · globaleaks.org

Every GlobaLeaks plan and price →

Strong points and limits

Strong points

  • Supports anonymous two-way reporting.
  • One setup can host multiple whistleblowing sites.
  • Offers over 90 languages.
  • Publishes independent security audit reports.

Limits

  • Self-hosted deployment requires installation.
  • Default attachment limit is 30MB per file.

Who it suits

It suits organizations such as independent media, activist groups, public agencies, and corporations that need whistleblowing intake. Its self-hosted deployment requires Linux or Docker installation.

Verdict

GlobaLeaks provides configurable reporting workflows and a range of documented security controls as self-hosted open-source software. Administrators should account for deployment needs and the default attachment limit, which can be configured higher.

Where Specifiction places it

Alternatives to GlobaLeaksAll alternatives →