
Introducing the GHCR Signer
Tool helps sign container images using continuous integration systems

Tool helps sign container images using continuous integration systems

We’re getting closer to the release of the brand new SecureDrop Inbox - today we’re publishing results from the security audit we commissioned to ensure it’s safe before putting it in the hands of journalists.

The inaugural release of SecureDrop Inbox is now available. The Inbox features a full rewrite of our client, and includes many new features and performance improvements

SecureDrop Inbox, the new window into the SecureDrop Workstation, has been rewritten from the ground up to replace the previous client application for existing journalist users. Improving upon the core functionality, it also includes bug fixes, speed improvements, and a range of new features.

A new SecureDrop Inbox will be released in the next few weeks, the result of work begun by the team in July 2025 to redesign how journalists process submissions. SecureDrop Workstation users will receive it automatically during a system update.

When it comes to software updates, how can you be sure if the update server is not compromised, or if the signing key leaks? Learn about reproducible builds, transparency logs and software attestation, and how they apply to Dangerzone.

Like experimenting with cutting-edge software? Our decentralized project to verify web assets and in-browser code for web applications has entered alpha testing

How can you be sure that a piece of software has not been tampered with? Learn about the concept of “reproducibility” and how it applies to Dangerzone and other projects

Journalists are working harder than ever to protect their sources. SecureDrop has never been more important

Santa’s security team has a challenge for you: craft him a letter that can bypass Dangerzone’s defenses and earn a bounty!