Security audit of new SecureDrop Inbox completed (opens in new tab)

In advance of the initial release of SecureDrop Inbox, we commissioned an independent security audit from X41 D-Sec. In keeping with our policy of undergoing audits before major code changes are shipped, this was the inaugural audit of the new SecureDrop Inbox and the third independent audit focused on the SecureDrop Workstation.This audit identified one medium-severity issue and three low-severity security issues in a prerelease version of the Inbox. Two of these issues will be mitigated in ...