Ashio vs GlobaLeaks
Ashio
ashio.euGlobaLeaks
globaleaks.orgSide by side
| Figure | Ashio | GlobaLeaks |
|---|---|---|
| Price from | €23/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 2 |
| Spec score · Whistleblower Hotline Software | 8.1 (#3) | 8.7 (#1) |
| Anonymous reporting | Reporters can submit reports without IP tracking, cookies, or fingerprinting. | Whistleblowers receive a unique 16-digit receipt for anonymous report access. |
| Case management | Teams can track reports through a status workflow from submission to resolution. | Reports can be labeled and assigned customizable case statuses and sub-statuses. |
| Encryption | Ashio says reports are encrypted with AES-256-GCM and recipient keys use P-256 ECDH; messages are verified with ECDSA P-256 signatures. | Reports, attachments, messages and metadata are encrypted with per-user and per-report keys. |
| Intended users | Ashio describes the reporting channel as a way for employees, contractors, and partners to speak up. | The maker describes use by independent media, activists, public agencies, corporations, and other organizations. |
| Purpose | Ashio provides an anonymous reporting channel and case management designed to support EU whistleblowing obligations. | GlobaLeaks is free, open-source software for setting up and maintaining a secure whistleblowing platform. |
Plans
In their own words
GlobaLeaks
GlobaLeaks is free, open-source software for organizations setting up and maintaining a whistleblowing platform. It supports anonymous two-way messaging, file exchange, configurable reporting channels, labels, and case statuses. Administrators can create multi-step questionnaires to structure submissions and manage the system through a web interface; one installation can host multiple virtual whistleblowing sites. The software encrypts reports and communications with recipients, supports Tor, and states that it does not log IP addresses. Listed controls include TLS 1.3, two-factor authentication, AppArmor, network sandboxing, and PGP for email notifications and file downloads. The project says it has received independent security audits since 2011 and publishes the reports. GlobaLeaks documents Debian and Ubuntu Linux support, package updates, and Docker installation. The default file attachment limit is 30MB, though administrators can configure it higher. It lists support for more than 90 languages, right-to-left languages, and WCAG 2.2 accessibility recommendations. Its intended users include independent media, activists, public agencies, corporations, and other organizations.