Clone this wiki locally
The secure and anonymous whistleblowing platform.
Consult our non-technical guidelines for whistleblowing initiatives to plan and organise your whistleblowing initiative.
Feature improvements and bug fixes to GlobaLeaks are detailed in the changelog
The Hermes Center for Transparency and Digital Human Rights – the organisation established to support GlobaLeaks – wants to help other organisations with good intentions set up whistleblowing initiatives. We recommend you follow the GlobaLeaks Fast Track Program. This is a collaborative workflow to quickly and safely get a GlobaLeaks installation up and running.
If you need to contact us privately to propose a specific whistleblowing initiative or involve the Hermes Center in a formal capacity, please contact us directly. We'd love to help you out!
Helping software development of GlobaLeaks is possible by clicking one of the options below.
The following sections form the complete documentation of the GlobaLeaks project:
- Glossary - presents the terminology used throughout GlobaLeaks.
- Architecture - explains the foundation and concepts that underpin GlobaLeaks.
- Setup Guide - guidelines for setup and best practices for organisations.
- Software Security - security features of Globaleaks.
- Software Development - the process of making GlobaLeaks what it is.
- Infrastructure - the testing and development infrastructure.
The following documents are the technical and operational corpus for setting up a GlobaLeaks based Whistleblowing Site:
- Technical Requirements - prerequisites to GlobaLeaks.
- Installation Guide - installation and setup of GlobaLeaks.
- Quick Setup Guide - use of GlobaLeaks with Tor2web and HTTPS with a gratis digital certificate from Lets Encrypt.
- Configuration Guide - how to set up GlobaLeaks.
- Advanced Configuration - the more obscure and in-depth system settings.
- Customization Guide - adjust and customize GlobaLeaks to suit your whistleblowing site.
- Troubleshooting Guide - debug GlobaLeaks if something doesn't work.
- Upgrade Guide - stay up to date.
- Integration Guide - use GlobaLeaks within third party websites.
The security and anonymity features built into GlobaLeaks:
- Threat Model - an overview of GlobaLeaks with regards to security considerations.
- Application Security Design and Details
- Operating System Security - protective features applied by GlobaLeaks.
- Encryption - protect of data in GlobaLeaks
- Penetration Tests - all PT and Security Audits performed against GlobaLeaks
- Security Awareness - Tips and privacy warnings in the user interface
Consult first the Glossary and familiarise yourself with the terms used. For a general understanding of the project, you can read the GlobaLeaks Project Plan. A deeper understanding of GlobaLeaks' architecture can be attained by reading Architecture Document.
Software Development Guidelines
If you plan to contribute to the development of GlobaLeaks, the following setup and style guides is suggested reading:
- How to setup a GlobaLeaks development environment
- Code styles guidelines for Backend development
- Code styles guidelines for Client development
To read more about how translation works and how you can help, visit the Localization Lab's translator guide.
|Branch||Build status||Code coverage|
The Release Procedure outlines preparation and publishing of new versions of GlobaLeaks.
GlobaLeaks releases are archived in our official deb repository: deb.globaleaks.org
The GlobaLeaks team makes use of several cloud services and donated servers to manage various services related to the project.
This section describes our own computing infrastructure. Please note that we do not accept leaks or submissions. This infrastructure is only used for project development.
- Cloud Services that run GlobaLeaks development infrastructure.
- Dedicated Servers that run GlobaLeaks testing and development instances.
GlobaLeaks is free software released under the GNU Affero General Public License v3.
GlobaLeaks makes use of a plethora of other free software projects. For a list of software used in GlobaLeaks refer to the Technology Selection.
Radio Free Asia Freedom 2 Connect Grant
The following page lists the monthly reports concerning the state of advancement of GlobaLeaks during the period financed by the Freedom 2 Connect Grant – June 2012 to April 2013.
Open Technology Fund Grant
This page following page lists the monthly reports concerning the state of advancement of GlobaLeaks during the period financed by the OTF Grant – July 2014 to January 2016.