SecureDrop, the Open Source whistleblower submission system

Kushal Das (~kushal)




SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by Freedom of the Press Foundation.

In the modern age of Internet, keeping privacy in the online world has become a bigger battle ground. It became an even bigger challenge for the journalists, lawyers, and anyone else who is dealing with sensitive material. Whistleblowing and leaking have dominated news coverage in recent years. SecureDrop (a Python application) project provides a reasonably safe way for the journalists to receive tips/sensitive materials from anyone, and still safeguarding the sources and keeping the materials secured.

SecureDrop also won The Award for Projects of Social Benefit from Free Software Foundation in 2016.


Below are few topics to work on during sprints.

  • Flask
  • Ansible
  • PyQt5
  • Debian packaging
  • QubesOS knowledge (only for specific things)
  • Sphinx (for documentation related issues)
  • Tests based pytest
  • Selenium (to help in the functional testing part)
  • UX/Frontend skill set

Please read the developer documentation before coming into the sprints. It is better if you can build the initial docker dev image at home, as that will reduce the network usage during sprints. Having a Debian Stretch VM hnady can also help in many parts of the project.

Also have a copy of the latest tor browser.

Content URLs:

Speaker Info:

Kushal Das is a SecureDrop maintainer working on the project full time as part of the Freedom of the Press Foundation. He is a CPython core developer and director at The Python Software Foundation.

Speaker Links:

Id: 1033
Section: Networking and Security
Type: Dev Sprint
Target Audience: Intermediate
Last Updated: