GlobaLeaks vs WhisTrust
GlobaLeaks
globaleaks.orgWhisTrust
whistrust.comSide by side
| Figure | GlobaLeaks | WhisTrust |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | Yes | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 2 | 3 |
| Spec score · Whistleblower Hotline Software | 8.7 (#1) | 6.9 (#24) |
| Case management | Reports can be labeled and assigned customizable case statuses and sub-statuses. | Professional includes case assignment and delegation, workflow automation, custom labels, and status workflows. |
| Compliance | The maker says the platform is compliant with ISO 37002, EU Directive 2019/1937, and GDPR, and designed in adherence to ISO/IEC 27001:2022. | The features page lists GDPR, SOX, and HIPAA compliance, and lists SOC 2 and ISO 27001 for Enterprise. |
| Encryption | Reports, attachments, messages and metadata are encrypted with per-user and per-report keys. | The features page says messages and data use AES-256 end-to-end encryption. |
| Integrations | The software supports integration with enterprise case-management platforms and existing websites. | Enterprise includes API and Webhooks integration; the features page also lists email integration for report submission and tracking-code responses. |
| Messaging | Whistleblowers and recipients can exchange comments and messages anonymously. | Professional includes encrypted two-way messaging between reporters and the compliance team. |
| Support | The project directs users to documentation, FAQs, GitHub ticketing, a forum and community chat. | Essential includes standard email support, Professional includes priority support and admin training, and Enterprise includes a dedicated CSM and 24/7 support with SLA. |
Plans
WhisTrust
- EnterprisePriced on request
- EssentialPriced on request
- ProfessionalPriced on request
In their own words
GlobaLeaks
GlobaLeaks is free, open-source software for organizations setting up and maintaining a whistleblowing platform. It supports anonymous two-way messaging, file exchange, configurable reporting channels, labels, and case statuses. Administrators can create multi-step questionnaires to structure submissions and manage the system through a web interface; one installation can host multiple virtual whistleblowing sites. The software encrypts reports and communications with recipients, supports Tor, and states that it does not log IP addresses. Listed controls include TLS 1.3, two-factor authentication, AppArmor, network sandboxing, and PGP for email notifications and file downloads. The project says it has received independent security audits since 2011 and publishes the reports. GlobaLeaks documents Debian and Ubuntu Linux support, package updates, and Docker installation. The default file attachment limit is 30MB, though administrators can configure it higher. It lists support for more than 90 languages, right-to-left languages, and WCAG 2.2 accessibility recommendations. Its intended users include independent media, activists, public agencies, corporations, and other organizations.