Skip to content
SPECIFICTION
Get listed

OpenWhistle

openwhistle.net

Free plan WebLinuxSelf-hosted
Visit openwhistle.net
Spec score 7.7 #7 of 19 in Whistleblowing Software

What it is

OpenWhistle is open-source software for organisations that need an internal whistleblowing channel under EU Directive 2019/1937 and Germany’s HinSchG. It runs on the organisation’s own server through Docker Compose or a Helm chart; the project does not offer hosted service. Reporters can submit information without an account or email address and receive a case number and UUID4 PIN to return to the status page, read replies, and send messages. In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason. Admin sign-in supports a password, LDAP, or OIDC, and requires TOTP. The maker says it does not store IP addresses and outbound requests are opt-in and off by default. Closed reports are deleted after 1,095 days by default. The interface supports English, German, French, and Brazilian Portuguese. It is free under GNU GPL v3.0, with no paid tier; the organisation provides its own server.

Spec sheet

Purpose
OpenWhistle is self-hosted whistleblowing software for internal reporting channels under EU Directive 2019/1937 and Germany’s HinSchG.Read 4 Oct 2026 · openwhistle.net
Intended users
The maker describes it for companies and public bodies covered by EU Directive 2019/1937 and HinSchG, including companies from 50 employees and financial firms.Read 4 Oct 2026 · openwhistle.net
Platforms
The documentation lists Linux hosts with Docker 24 or newer and Docker Compose v2, with linux/amd64 and linux/arm64 container images.Read 4 Oct 2026 · openwhistle.net
Integrations
Admin authentication can use LDAP or an external OIDC identity provider; attachments can optionally be scanned with ClamAV.Read 4 Oct 2026 · openwhistle.net
Privacy
The maker says no IP address is stored at any layer, and outbound requests are opt-in and off by default.Read 4 Oct 2026 · openwhistle.net
Support
The maker says there is no paid support tier and points users to GitHub Issues for community support.Read 4 Oct 2026 · openwhistle.net
License
It is open source under the GNU General Public License v3.0.Read 4 Oct 2026 · openwhistle.net
Authentication
Admin sign-in supports a password, LDAP or OIDC, and always requires TOTP.Read 4 Oct 2026 · openwhistle.net
Confidential mode
In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason.Read 4 Oct 2026 · openwhistle.net
Follow-up
Reporters can read replies and send messages at the status page using their case number and PIN.Read 4 Oct 2026 · openwhistle.net
Hosting
It runs on an organisation’s own server using Docker Compose or a Helm chart; the project offers no hosted service.Read 4 Oct 2026 · openwhistle.net
Languages
The interface supports English, German, French and Brazilian Portuguese.Read 4 Oct 2026 · openwhistle.net
Reporting
Whistleblowers receive a case number and UUID4 PIN, with no account or email address required.Read 4 Oct 2026 · openwhistle.net
Retention
Closed reports are deleted after 1,095 days by default.Read 4 Oct 2026 · openwhistle.net

Plans and prices

Free Free No paid tier or subscription · you pay for your own server Read 4 Oct 2026 · openwhistle.net

Every OpenWhistle plan and price →

Strong points and limits

Strong points

  • Reporters need no account or email address.
  • Confidential mode encrypts reporter contact details.
  • Admin login supports LDAP or OIDC and requires TOTP.
  • Supports English, German, French, and Brazilian Portuguese.
  • Free under GNU GPL v3.0.

Limits

  • The project provides no hosted service.
  • Organisations pay for their own server.
  • No paid support tier is offered.
  • Closed reports are deleted after 1,095 days by default.

Who it suits

OpenWhistle suits companies and public bodies covered by EU Directive 2019/1937 and HinSchG, including companies from 50 employees and financial firms. It requires an organisation willing to host and maintain the software on its own server.

Verdict

OpenWhistle provides self-hosted reporting, follow-up, and confidential reporting controls, with no subscription charge. Organisations must supply the server and rely on community support through GitHub Issues.

Where Specifiction places it

Alternatives to OpenWhistleAll alternatives →