Is it possible to customize or disable the Tor browser panel?

[josecarlosdiez-becall]

Problem/Need

Our cybersecurity team requires removing any option in Globaleaks that allows users to download Tor Browser from the platform.
We have not found any configuration or setting to disable this behavior. Currently, users can still access Tor Browser download links or prompts, which conflicts with our internal security policies.

Proposal

Please provide a way to disable or remove Tor Browser download links, such as a configuration option or flag, to prevent exposing this functionality in restricted environments.

[evilaliv3]

Thank you for your question @osecarlosdiez-becall

The platform provides the ability to both customize and disable the Privacy Panel through configuration options available under Settings → Advanced.

This functionality is intended primarily to allow organizations to fine-tune the presentation of information within the panel, rather than to disable it by default. Disabling the Privacy Panel is considered an exceptional measure, appropriate only in specific high-risk contexts—for instance, where the availability of Tor Browser downloads may pose a greater risk to the whistleblower than the use of a standard browser (e.g., in certain repressive or high-surveillance environments).

Accordingly, we strongly discourage the use of this feature to disable the panel in corporate compliance scenarios. The Privacy Panel serves an important function in informing users about:

the risks associated with conventional browsers
potential tracking mechanisms present in standard network environments
safer alternatives for maintaining anonymity and confidentiality

Removing this information in an organizational context may inadvertently reduce user awareness and weaken the overall protection afforded to potential whistleblowers.

Furthermore, it should be emphasized that organizations are expected to explicitly advise users not to access the platform using corporate devices or corporate networks when submitting reports, as this remains a fundamental measure for preserving confidentiality and minimizing traceability risks.