Whistleblower Relay
A tip-line and intake service for organizations that lets sources submit sensitive information via plain-looking email or chat instead of flagged encrypted attachments.
compliance officers, newsroom tip-line editors, and NGO intake leads who need to receive sensitive disclosures safely
- Embeddable web form where submissions are encoded into a steganographic cover message before being emailed to your intake address
- Per-source session keys so only your trained reviewer can decode the incoming cover text
- Audit trail showing how the message arrived and when, without exposing plaintext to the email provider
- Training mode that teaches journalists and compliance teams how to converse safely with sources using cover-text techniques
The conversation-steganography repo's 506 stars show the encoding technique is now practical; the matching product on the receiving side — letting newsrooms and compliance teams accept these tip formats — closes the loop.
SecureDrop's public directory lists major newsrooms (Washington Post, Guardian, Der Spiegel, Globe and Mail, Disclose) actively running tip-line infrastructure, confirming real and ongoing demand from newsrooms and NGOs for secure intake.SecureDrop — Share and accept documents securely ↗
SecureDrop is a mature, free, open-source incumbent backed by the Freedom of the Press Foundation and deployed broadly; commercial whitespace against a free OSS tool used by exactly the target buyers is narrow, though the 'plain-looking chat' stego angle is a different threat model.SecureDrop — Share and accept documents securely ↗
Newsrooms — the highest-profile buyer segment — get SecureDrop free; charging them is near-impossible, and compliance/NGO buyers have small budgets while favoring vetted OSS over novel SaaS, so willingness to pay is weak.SecureDrop — Share and accept documents securely ↗
Whistleblowing demand is durable, but steganographic tip channels face legal/regulatory risk (could be flagged as evasion tooling) and depend on a fragile ecosystem where both sender tooling and detector resistance must stay ahead.
A normal tip-line web/email service is straightforward, but the steganography half requires a compatible sender client, an LLM-encoding pipeline that resists modern detectors, and a coordination layer few sources would adopt over Tor+SecureDrop.