Since Freedom of the Press Foundation launched SecureDrop in October 2013 (building on the DeadDrop codebase originally developed by the late Aaron Swartz), the open source platform has become the de facto standard for secure communication between news organizations and sources.
Our SecureDrop directory currently contains 33 instances ranging from individual journalists over advocacy organizations to major media outlets like The New York Times and The Washington Post. Dozens more instances have been set up (if yours meets our security requirements, please submit it). With such a large selection, it can be difficult for sources to decide what news organization to work with.
To better accommodate the continued growth in the number of SecureDrops, we have relaunched the SecureDrop website with a new directory that makes it possible to search and filter instances by language, country and topic:
Directory entries now also show more information about a given news organization or journalist:
As part of this relaunch, we redesigned the SecureDrop website to make it more visually appealing and easier to navigate. The blog now makes announcements and security advisories more quickly discoverable, for example:
We have also begun work on an automated scanner that will check the security aspects of the deployment of landing pages against our recommendations. Information from our security scans will be integrated in the directory in the near future.
We are grateful to the Little Weaver Web Collective for their work with us on this project. The co-operative recently shut its doors, but Little Weaver co-founder Harris Lapiroff is now FPF’s Principal Web Developer.
Like FPF’s other websites, the new SecureDrop website is built entirely using open source software (chiefly Django and Wagtail), and will itself be fully released as its own open source project in the near future. For now, if you notice anything broken, please send us a note at securedrop@freedom.press (gpg key). If you are a news organization with access to our support portal, you can also request changes to your directory entry by opening a ticket.