About OpenCyph

A secure tip line your sources can trust, that you can run yourself.

What we do

An open-source, self-hostable secure intake system. End-to-end encryption so the server operator cannot read submissions, metadata minimisation by design, anonymous two-way conversation with the source through a code rather than an identity, submission of large files, and an auditable, published cryptographic design. Because it is open source and self-hosted, the organisation can prove to a source what it does and does not retain, which is the only thing that makes a serious source use it. A hosted option exists for organisations without infrastructure capability, with the trust trade-off stated plainly rather than glossed over.

Who we built it for

• Newsrooms and investigative units

  Journalists who receive sensitive disclosures and need a channel that sophisticated sources are willing to use.

• Human rights organisations

  Organisations taking confidential submissions that must not expose the person making them.

• Ethics programmes and regulators

  Corporate ethics and whistleblower programmes, and regulators who receive sensitive disclosures.

The problem

Organisations that need confidential submissions mostly use an email address, which exposes the source completely, or a hosted whistleblowing service whose operator can see everything and is subject to legal compulsion.

Sources are increasingly sophisticated and will not use a system they cannot verify, so the disclosures that matter most never arrive.

Try it before anything else

The free tip line source protection check runs in your browser with no account. Answer questions about your tip line, and see where it could expose a source. Open it.