GlobaLeaks review 2026: how this open-source Tor-based whistleblowing platform works, its security model, pricing (its free), key features, pros, cons and…
GlobaLeaks is free, open-source software for building secure and anonymous whistleblowing or reporting channels. Instead of signing up for a hosted service, an organization downloads and deploys the GlobaLeaks application on its own server or a partner's managed infrastructure, then configures reporting workflows through an administrative setup wizard.
The project was started in December 2010 by Fabio Pietrosanti and shared with the transparency and hacktivist community, with a first working prototype released in September 2011. It has since been developed and maintained by the Hermes Center for Transparency and Digital Human Rights, an Italian nonprofit, and is recognized by the Digital Public Goods Alliance as a Digital Public Good.
GlobaLeaks runs as a Tor Onion Service (v3) alongside standard HTTPS access, encrypts submissions and attachments end to end using its own encryption protocol, and enforces TLS 1.3 with automatic Let's Encrypt certificates. It deliberately avoids logging IP addresses, device fingerprints, or browser metadata, and does not embed third-party trackers or persistent cookies.
Administrators can define multiple independent reporting channels with custom intake questionnaires, assign recipients and reviewers by role, and communicate two-way with a source through secure messaging without ever learning that source's identity. The interface supports dozens of languages, making it usable for multinational NGOs, newsrooms and enterprises.
GlobaLeaks itself carries no license fee: it is free, open-source software that any organization can self-host, audit and modify. There is no SaaS subscription tier structure because GlobaLeaks is not sold as a hosted product by its maintainers.
The real cost of adoption is infrastructure and operations: server hosting, systems-administration time, and optionally paid implementation, hardening or managed-hosting support from third-party consultancies or partners in the Hermes Center's network.
Yes. GlobaLeaks is free, open-source software. There is no license fee; the only costs are the hosting infrastructure and administration time an organization spends running its own instance.
GlobaLeaks is developed and maintained by the Hermes Center for Transparency and Digital Human Rights, an Italian nonprofit, with funding from grants such as the Open Technology Fund rather than commercial investors.
No, but it supports and recommends running as a Tor Onion Service in addition to standard HTTPS access, since Tor offers stronger resistance to network-level identification and censorship for sensitive sources.
Yes. Beyond investigative journalism, organizations use GlobaLeaks to meet whistleblower-protection regulations, such as the EU Whistleblowing Directive, by offering an internal, confidential reporting channel.
The platform is designed to avoid logging IP addresses, browser or device fingerprints, and persistent cookies, and it follows a strict data-retention policy that deletes submission data as soon as policy allows.
Both are open-source, security-focused whistleblowing platforms, but GlobaLeaks emphasizes an admin-configurable, multi-channel model with a guided setup wizard, making it approachable for compliance and NGO deployments as well as journalism leak drops.