Secure Hosting for Whistleblower Platforms

For most workloads the hosting provider is a trusted party. For whistleblower platforms it is not. The provider sees network metadata, can be compelled to image disks, and in many jurisdictions can be served with gag orders that prevent disclosure to the customer. AnubizHost addresses this by operating from jurisdictions with high procedural barriers, running minimal logging at the hypervisor layer, and refusing informal data requests that lack proper legal basis.

We cannot eliminate the provider from the threat model entirely - no provider can. What we do is shrink the provider attack surface to its irreducible minimum and let you compensate for the rest with disk encryption and Tor only intake.

Both SecureDrop and GlobaLeaks expect dedicated hardware or VPS with full root, isolated networking, and the ability to run Tor onion services without provider interference. AnubizHost VPS deliver exactly that. You install the stack from upstream documentation, configure your onion service, and we do not insert any monitoring or filtering between your application and the Tor network.

For larger deployments that want to separate the public intake from the journalist viewing station across two VPS, our private networking option lets you bridge the two without exposing the viewing station to the public internet at all.

Iceland, Switzerland, and certain other jurisdictions on our network have constitutional or statutory press protections that extend to whistleblower intake operations in practice. Combine that with crypto only billing and your platform has no provider side identifier that ties it to a real world person or organization. The operator account at AnubizHost can be funded with Monero and managed from Tor, leaving no payment trail.

For organizations that want stronger legal posture, dedicated servers in Iceland with custom rDNS are also available. The combination of dedicated hardware and jurisdictional protection is the strongest defensive posture commercially available.