Base
Hardened build
minimal ports, security patches applied at build time
GlobaLeaks on Ubuntu 24.04 LTS
Azure
Applications
GlobaLeaks, an open source whistleblowing platform for confidential reporting, with encrypted intake and two way anonymous follow up.
Overview
GlobaLeaks is a free and open source whistleblowing platform used by news organisations, NGOs, corporates and public bodies to receive confidential reports. Reporters submit through a web questionnaire without creating an account and are given a 16 digit access code they can use to return to their case, read replies from your team and add further information, which makes genuine two way follow up possible even when the reporter stays anonymous. Reports are encrypted and delivered to named recipients, so only the people you designate can read them. Role separation between administrator, recipient, custodian and analyst, configurable questionnaires and reporting channels, file attachments, per report retention and a full audit log make it a common choice for organisations running an EU Whistleblowing Directive compliance programme or any confidential disclosure channel.
Why the cloudimg image
The cloudimg image is secure by default and ships with no account of any kind: GlobaLeaks creates the administrator only inside its first run setup wizard, so you choose the username and password yourself and there is no vendor default to rotate. Every instance generates its own platform database, receipt salt, node identity and TLS certificate on first boot, so no two deployments share cryptographic material. HTTPS works from the very first visit using that per instance certificate, and the admin panel switches to a trusted certificate through ACME whenever you are ready. The optional Tor onion service is deliberately switched off so the appliance is HTTPS only out of the box, and a shipped self check command proves that posture on demand. Installed from the official upstream package repository so you keep receiving upstream security updates, fully patched, with a paired deploy guide and 24/7 cloudimg support.
Common uses
- Run a confidential whistleblowing channel for EU Whistleblowing Directive compliance
- Give journalists and NGOs a secure intake for sources and evidence
- Operate an internal speak up line with encrypted delivery to named recipients
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Applications
Actual Budget Self-Hosted Sync Server
Applications
This image runs the Actual Budget 26.6 sync server, the open source local-first personal finance and envelope budgeting ...
Admidio Membership Management
Applications
This image runs Admidio, the open source, self hosted membership management platform used by clubs, associations and non...
AdventureLog Self-Hosted Travel Tracker
Applications
Pre-hardened for AdventureLog, a self-hosted travel tracker and trip planner. Launch a private travel journal with inter...
Apache Answer
Applications
This image runs Apache Answer, the open source question and answer platform for teams at any scale.
Apache Fineract Core Banking - Pre-Configured ,
Applications
Apache Fineract is the open source core banking engine behind the Mifos ecosystem.
Apache OFBiz ERP and CRM Suite
Applications
Apache OFBiz, the open-source ERP, CRM, e-commerce and supply-chain suite, preinstalled and running behind nginx and rea...