OpenWhistle vs WhisTrust
OpenWhistle
openwhistle.netWhisTrust
whistrust.comSide by side
| Figure | OpenWhistle | WhisTrust |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 1 | 3 |
| Spec score · Whistleblower Hotline Software | 7.6 (#10) | 6.9 (#24) |
| Integrations | Admin authentication can use LDAP or an external OIDC identity provider; attachments can optionally be scanned with ClamAV. | Enterprise includes API and Webhooks integration; the features page also lists email integration for report submission and tracking-code responses. |
| Support | The maker says there is no paid support tier and points users to GitHub Issues for community support. | Essential includes standard email support, Professional includes priority support and admin training, and Enterprise includes a dedicated CSM and 24/7 support with SLA. |
Plans
WhisTrust
- EnterprisePriced on request
- EssentialPriced on request
- ProfessionalPriced on request
In their own words
OpenWhistle
OpenWhistle is open-source software for organisations that need an internal whistleblowing channel under EU Directive 2019/1937 and Germany’s HinSchG. It runs on the organisation’s own server through Docker Compose or a Helm chart; the project does not offer hosted service. Reporters can submit information without an account or email address and receive a case number and UUID4 PIN to return to the status page, read replies, and send messages. In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason. Admin sign-in supports a password, LDAP, or OIDC, and requires TOTP. The maker says it does not store IP addresses and outbound requests are opt-in and off by default. Closed reports are deleted after 1,095 days by default. The interface supports English, German, French, and Brazilian Portuguese. It is free under GNU GPL v3.0, with no paid tier; the organisation provides its own server.