Looking back at 2025
Journalists are working harder than ever to protect their sources. SecureDrop has never been more important Read More
WEBCAT: Towards auditable web application runtimes
In this blog post, we examine the technical requirements for web applications to be properly auditable, arguing that reproducibility is a necessary condition. Enforcing the constraints needed to achieve this on the web is non-trivial, and we present a technical deep dive into how we approach this problem in WEBCAT. Read More
Security Analysis of SecureDrop Protocol Presented at IETF 124
SecureDrop software engineer Cory Myers and ETH Zurich researcher Felix Linker gave a talk entitled ”SecureDrop — From Design to Analysis” to the Usable Formal Methods Research Group at the 124th meeting of the Internet Engineering Task Force in Montreal on Nov. 4, 2025. Read More
See you at Transparency.dev
We’re pleased to announce that we’re bringing WEBCAT to the second annual Transparency.dev Summit later this month in Gothenburg, Sweden. Read More
Bootstrapping SecureDrop Workstation via Qubes-Contrib
An upcoming release of SecureDrop Workstation will simplify the installation process by utilizing a bootstrap package hosted in Qubes OS’s “Contrib” repository. Read More
We’re changing how we deliver support to SecureDrop users
We are now providing support directly via Signal and will be completing a migration away from Redmine on Nov. 3, 2025 Read More
Implementing ‘just-works’ printing in SecureDrop Workstation
The SecureDrop Workstation moved to a ‘just works’ printing approach. This is how we did it. Read More
Ubuntu Focal has reached end of life
Ubuntu 20.04 (Focal) has reached end of life. Any SecureDrop installations that have not upgraded to Ubuntu Server 24.04 (Noble) will automatically take their Source Interfaces offline. Read More