Frequently asked questions

Questions people actually ask

Can the server operator read submissions?

No. Submissions are encrypted end to end, so the server operator cannot read them.

How do we talk to a source without knowing who they are?

Through an anonymous two-way conversation. The source uses a code rather than an identity.

Why self-host rather than use a hosted whistleblowing service?

Because the code is open source and runs on your own infrastructure, you can prove to a source what the system does and does not retain. Serious sources will not use a system they cannot verify.

Is there a hosted option?

Yes, for organisations without infrastructure capability. The trust trade-off of using a hosted service is stated plainly rather than glossed over.

What does it cost?

The software is free and open source. The hosted service is 199 dollars a month for small organisations, or 990 dollars a month for larger ones, which adds custom domains and retention policy controls.

Can you help us deploy and harden it?

Yes. Paid deployment, hardening and training engagements start from 6,000 dollars.

Can we check the cryptography ourselves?

Yes. The cryptographic design is published and auditable, and all of the code is public.

Why should I trust the tip line source protection check?

The score comes from your answers, worked out in your browser. It does not test your system or its encryption. OpenCyph's published cryptographic design and public code are how its own claims can be checked.