SecureDrop

capture taken 1h ago

what the page says

Share and accept documents securely

SecureDrop is an open-source whistleblower submission system that media organizations can install to securely accept documents from anonymous sources. It was originally coded by the late Aaron Swartz and is now managed by Freedom of the Press Foundation.

Skip to content Main menu Overview List of SecureDrops News Contribute Donate Docs Research SecureDrop Share and accept documents securely. SecureDrop is an open source whistleblower submission system that media organizations and NGOs can install to securely accept documents from anonymous sources. SecureDrop is available in 22 languages. Get SecureDrop at your organization Mobile menu HOME OVERVIEW LIST OF SECUREDROPS NEWS CONTRIBUTE DONATE DOCS RESEARCH LATEST NEWS SecureDrop Inbox 1.6.0 released LATEST RELEASES SecureDrop 2.16.1 July 8, 2026 Release notes GitHub SecureDrop Workstation…

reachability history

The 6 most recent checks.
When	Status	HTTP	Response	Bytes	Via
1h ago	Alive	200	623 ms	636,801	chrome-stealth
2h ago	Alive	200	509 ms	636,801	chrome-stealth
3h ago	Alive	200	953 ms	636,801	chrome-stealth
5h ago	Alive	200	628 ms	636,801	chrome-stealth
5h ago	Alive	200	710 ms	636,801	chrome-stealth
7h ago	Alive	200	493 ms	636,801	chrome-stealth

security headers

Csp

Raw

base-uri 'self'; default-src 'self'; object-src 'self' media.securedrop.org; form-action 'self'; style-src-attr 'self' 'unsafe-hashes' 'sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE=' 'sha256-RjGXttEfn3lP8F5dx3vtPdu6djlmub1vrGRYYEoYmk0='; frame-src 'self' media.securedrop.org; frame-ancestors 'self'; media-src 'self' media.securedrop.org; connect-src 'self' analytics.freedom.press media.securedrop.org; img-src 'self' analytics.freedom.press media.securedrop.org; style-src 'self' 'sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE='; script-src 'self' 'unsafe-eval' analytics.freedom.press; report-uri https://freedomofpress.report-uri.com/r/d/csp/enforce

Directives

Base uri: 'self'
Default src: 'self'
Object src: 'self'media.securedrop.org
Form action: 'self'
Style src attr: 'self''unsafe-hashes''sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE=''sha256-RjGXttEfn3lP8F5dx3vtPdu6djlmub1vrGRYYEoYmk0='
Frame src: 'self'media.securedrop.org
Frame ancestors: 'self'
Media src: 'self'media.securedrop.org
Connect src: 'self'analytics.freedom.pressmedia.securedrop.org
Img src: 'self'analytics.freedom.pressmedia.securedrop.org
Style src: 'self''sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE='
Script src: 'self''unsafe-eval'analytics.freedom.press
Report uri: https://freedomofpress.report-uri.com/r/d/csp/enforce

Unsafe inline

Unsafe eval

yes

X frame options

DENY

X content type options

nosniff

Referrer policy

same-origin

Cross origin

Opener: same-origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Onion location

http://sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion/

Score

58

Missing

hstspermissions_policycoepcorp

technology detected

Server

Raw: gunicorn
Name: gunicorn
Family: gunicorn

Analytics

Name
Matomo

Protocol

http/1.1

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 200
Via: chrome-stealth

contacts published

Total0

crypto addresses

Total0

forms on the page

Count

1

Kinds

Search: 1

Has login

Has search

yes

Has upload

Forms

Kind
search
Method
get
Action
http://sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion/search/
Inputs
2
Types
textsubmit
Password
no
File
no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 7
internal not tracked internal 25
external not tracked external 16
total not tracked total 62
truncated not tracked truncated

response headers

Header	Value
`content-length`	636801
`content-security-policy`	base-uri 'self'; default-src 'self'; object-src 'self' media.securedrop.org; form-action 'self'; style-src-attr 'self' 'unsafe-hashes' 'sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE=' 'sha256-RjGXttEfn3lP8F5dx3vtPdu6djlmub1vrGRYYEoYmk0='; frame-src 'self' media.securedrop.org; frame-ancestors 'self'; media-src 'self' media.securedrop.org; connect-src 'self' analytics.freedom.press media.securedrop.org; img-src 'self' analytics.freedom.press media.securedrop.org; style-src 'self' 'sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE='; script-src 'self' 'unsafe-eval' analytics.freedom.press; report-uri https://freedomofpress.report-uri.com/r/d/csp/enforce
`content-type`	text/html; charset=utf-8
`cross-origin-opener-policy`	same-origin
`date`	Fri, 21 Aug 2026 17:48:00 GMT
`onion-location`	http://sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion/
`referrer-policy`	same-origin
`server`	gunicorn
`vary`	Cookie
`x-content-type-options`	nosniff
`x-frame-options`	DENY