GlobaLeaks

Whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Healthy · 78
78/100
Healthy

Actively maintained with regular releases.

Maintenance 30/40
Releases 25/25
Community 8/20
Momentum 15/15

Commit activity more than 74% of tracked projects; popularity more than 42%. How this is calculated.

Commits, last 11 months

2025-10: 50 commits 2025-11: 33 commits 2025-12: 33 commits 2026-01: 23 commits 2026-02: 63 commits 2026-03: 25 commits 2026-04: 24 commits 2026-05: 183 commits 2026-06: 213 commits 2026-07: 60 commits 2026-08: 54 commits
2025-10 761 total 2026-08
Stars1.5k
Latest releasev5.0.99 · 26 Jul 2026
Repo updated5 Sept 2026
LicenceAGPL-3.0
Built withPython, deb, Docker

Is GlobaLeaks actively maintained?

GlobaLeaks is under active development: 761 commits landed over the last 11 months, averaging roughly 109 commits a month in the most recent quarter.

The most recent tagged release, v5.0.99, shipped about two months ago — a current, installable version exists today.

GlobaLeaks ranks #14 of 46 in Communication - Custom Communication Systems, placing it mid-table for maintenance activity.

What GlobaLeaks actually does

GlobaLeaks is a self-hosted platform designed to facilitate secure whistleblowing and anonymous reporting. It provides the necessary infrastructure for organisations to receive tips and maintain communication channels while protecting the identity of sources. The system can be deployed using Python, Debian packages, or Docker containers.

Best fit: It is well-suited for investigative journalism outlets, human rights organisations, and enterprises that require a dedicated, confidential channel for internal reporting.

Worth knowing: Operating a secure whistleblowing platform carries significant legal and operational responsibilities regarding data retention and anonymity. You will also need to comply with the copyleft requirements of the AGPL-3.0 licence if you modify or distribute the source code.

Deployment notes

You will typically need to configure a reverse proxy for TLS termination and ensure persistent storage volumes are provisioned for database and file attachments. Deployment via Docker or standard deb packages allows for straightforward integration into existing server environments.


Alternatives to GlobaLeaks

Projects in the same categories, ordered by health score.