Do you host the Journalist Workstation too?

No. The Journalist Workstation is by design an air-gapped Tails machine on newsroom premises. Hosting it on a VPS defeats the air-gap and breaks the threat model.

Does AnubizHost have access to submitted documents?

No. Submissions are GPG-encrypted to the journalist organization's key at the moment of upload. We see only ciphertext.

What is the typical setup timeline?

2 to 4 weeks. Includes VPS provisioning, GPG key generation on the air-gapped Workstation, Source Server configuration, end-to-end dry-run testing.

Can the SecureDrop URL be published on the clearnet site?

Yes, with appropriate instructions. Published examples include the New York Times, the Guardian, and ProPublica.

Tor Hosting

SecureDrop Source Server VPS in Iceland

SecureDrop is the gold-standard whistleblower submission platform used by investigative-journalism organizations worldwide. The Source Server is the public-facing Tor onion; the Journalist Workstation is air-gapped on the newsroom's premises. AnubizHost provides Iceland VPS for the Source Server half, with press-shield jurisdiction and hardened defaults aligned with the SecureDrop Project's hardening guide.

Need this done for your project?

We implement, you ship. Async, documented, done in days.

Start a Brief

Why Iceland for SecureDrop

SecureDrop's threat model centers on source-identity protection. Iceland's constitutional press shield makes source-identity disclosure substantially harder to compel than anywhere else in Western Europe. Combined with the SecureDrop architecture's air-gapped Journalist Workstation, hosting the Source Server in Iceland gives a strong defense-in-depth posture.

Source Server Hardening

The Source Server runs Tor as a v3 hidden service serving the SecureDrop Source Interface. Hardening baseline: full-disk LUKS encryption with key entered at boot, Tor bound to unix socket only, AppArmor profile constraining the SecureDrop application, no outbound network reachability except Tor, submission storage GPG-encrypted to the Journalist Workstation key. Our Iceland VPS ship with this baseline.

Journalist Workstation Separation

We host the Source Server only. The Journalist Workstation is by SecureDrop project design an air-gapped Tails-based machine on the newsroom's physical premises. Do not host the Journalist Workstation on a VPS; that breaks the threat model fundamentally.

Crypto Billing, Long-Term Engagement

BTC and XMR. SecureDrop deployments are typically annual or multi-year commitments. We work with newsroom IT directly during setup; operators should expect a 2 to 4 week deployment timeline.

Related Services

Offshore VPS from $17.90/mo Dedicated Servers DevOps Services

Why Anubiz Host

100% async — no calls, no meetings

Delivered in days, not weeks

Full documentation included

Production-grade from day one

Security-first approach

Post-delivery support included

Bulletproof Hosting Providers

DMCA-Ignored Servers

Offshore VPS Hosting

Anonymous Hosting Solutions

Ready to get started?

Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.

Start a Brief Browse SecureDrop VPS