Freedom of the Press Foundation has stated it will have the SecureDrop code and security environment audited by an independent third party before every major version release and then publish the results. The first audit was conducted by security researchers at the University of Washington and Bruce Schneier. The second audit was conducted by Cure53, a German security firm.
The Freedom of the Press Foundation now maintains an official directory of SecureDrop instances. This is a partial list of instances at prominent news organizations.
Ball, James (5 Jun 2014). "Guardian launches SecureDrop system for whistleblowers to share files". The Guardian. https://www.theguardian.com/technology/2014/jun/05/guardian-launches-securedrop-whistleblowers-documents
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
Poulsen, Kevin (14 May 2013). "Strongbox and Aaron Swartz". The New Yorker. https://www.newyorker.com/news/news-desk/strongbox-and-aaron-swartz
Timm, Trevor (9 January 2018). "A tribute to James Dolan, co-creator of SecureDrop, who has tragically passed away at age 36". Freedom of the Press Foundation. https://freedom.press/news/tribute-james-dolan-co-creator-securedrop-who-has-tragically-passed-away-age-36/
Davidson, Amy (15 May 2013). "Introducing Strongbox". The New Yorker. Retrieved 20 May 2013. /wiki/Amy_Davidson_(author)
"Strongbox". The New Yorker. Archived from the original on 13 April 2017. Retrieved 15 November 2013. https://web.archive.org/web/20170413164430/https://projects.newyorker.com/strongbox/
Biryukov, Alex; Pustogarov, Ivan; Thill, Fabrice; Weinmann, Ralf-Philipp (2013). "Content and popularity analysis of Tor hidden services". arXiv:1308.6768 [cs.CR]. /wiki/ArXiv_(identifier)
Davidson, Amy (15 May 2013). "Introducing Strongbox". The New Yorker. Retrieved 26 December 2013. http://www.newyorker.com/online/blogs/closeread/2013/05/introducing-strongbox-anonymous-document-sharing-tool.html
Davidson, Amy (15 May 2013). "Introducing Strongbox". The New Yorker. Retrieved 20 May 2013. /wiki/Amy_Davidson_(author)
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
Davidson, Amy (15 May 2013). "Introducing Strongbox". The New Yorker. Retrieved 20 May 2013. /wiki/Amy_Davidson_(author)
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
Davidson, Amy (15 May 2013). "Introducing Strongbox". The New Yorker. Retrieved 20 May 2013. /wiki/Amy_Davidson_(author)
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
Timm, Trevor (20 January 2014). "SecureDrop Undergoes Second Security Audit". Freedom of the Press Foundation. Retrieved 13 July 2014. https://pressfreedomfoundation.org/blog/2014/01/securedrop-undergoes-second-security-audit
Czeskis, Alexei; Mah, David; Sandoval, Omar; Smith, Ian; Koscher, Karl; Appelbaum, Jacob; Kohno, Tadayoshi; Schneier, Bruce. "DeadDrop/StrongBox Security Assessment" (PDF). University of Washington Department of Computer Science and Engineering. Retrieved 13 July 2014. http://www.czeskis.com/research/pubs/UW-CSE-13-08-02.PDF
Timm, Trevor (20 January 2014). "SecureDrop Undergoes Second Security Audit". Freedom of the Press Foundation. Retrieved 13 July 2014. https://pressfreedomfoundation.org/blog/2014/01/securedrop-undergoes-second-security-audit
Source Guide SecureDrop https://docs.securedrop.org/en/stable/source.html
ssteele (6 December 2016). "Tor at the Heart: SecureDrop". Tor Blog. https://blog.torproject.org/tor-heart-securedrop
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Kassner, Michael (20 May 2013). "Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works". TechRepublic. Archived from the original on 29 July 2013. Retrieved 20 May 2013. https://web.archive.org/web/20130729032429/http://www.techrepublic.com/blog/it-security/aaron-swartz-legacy-lives-on-with-new-yorkers-strongbox-how-it-works/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Kirchner, Lauren. "When sources remain anonymous". Columbia Journalism Review. Retrieved 28 January 2014. https://www.cjr.org/behind_the_news/securedrop_etc.php
Timm, Trevor (29 October 2013). "Forbes Launches First Updated Version of SecureDrop Called SafeSource". Freedom of the Press Foundation. Retrieved 28 January 2014. https://pressfreedomfoundation.org/blog/2013/10/forbes-launches-first-updated-version-securedrop-called-safesource
Greenberg, Andy. "Introducing SafeSource, A New Way To Send Forbes Anonymous Tips And Documents". Forbes. Retrieved 28 January 2014. https://www.forbes.com/sites/andygreenberg/2013/10/29/introducing-safesource-a-new-way-to-send-forbes-anonymous-tips-and-documents/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Chavkin, Sasha (21 October 2013). "Initiatives seek to protect anonymity of leakers". The International Consortium of Investigative Journalists. Retrieved 28 January 2014. http://www.icij.org/blog/2013/10/initiatives-seek-protect-anonymity-leakers
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Tigas, Mike (27 January 2014). "How to Send Us Files More Securely". ProPublica. Retrieved 28 January 2014. https://www.propublica.org/nerds/item/how-to-send-us-files-more-securely
Timm, Trevor (27 January 2014). "ProPublica Launches New Version of SecureDrop". The Freedom of the Press Foundation. Retrieved 28 January 2014. https://pressfreedomfoundation.org/blog/2014/01/propublica-launches-new-version-securedrop
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
"How to Securely Contact The Intercept". The Intercept. Retrieved 9 February 2014. https://firstlook.org/theintercept/securedrop/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Bowe, Rebecca (18 February 2014). "Introducing BayLeaks". San Francisco Bay Guardian. Retrieved 20 February 2014. http://www.sfbg.com/2014/02/18/introducing-bayleaks
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
"Q&A about SecureDrop on The Washington Post". The Washington Post. 5 June 2014. https://www.washingtonpost.com/pr/wp/2014/06/05/qa-about-securedrop-on-the-washington-post/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Ball, James (5 Jun 2014). "Guardian launches SecureDrop system for whistleblowers to share files". The Guardian. https://www.theguardian.com/technology/2014/jun/05/guardian-launches-securedrop-whistleblowers-documents
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
"The Globe adopts encrypted technology in effort to protect whistle-blowers". The Globe and Mail. 4 March 2015. https://www.theglobeandmail.com/news/investigations/the-globe-adopts-encrypted-technology-in-effort-to-protect-whistle-blowers/article23302598/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
"CBC adopts SecureDrop to allow for anonymous leaks". 29 January 2016. http://www.cbc.ca/news/technology/cbc-securedrop-whistleblowers-1.3412450
"How SecureDrop helps CPJ protect journalists". Committee to Protect Journalists. 12 January 2016. https://cpj.org/2016/05/how-securedrop-helps-cpj-protect-journalists/
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
Timm, Trevor [@trevortimm] (15 December 2016). "Nice. The @NYTimes launched @SecureDrop today, along with a really useful secure tips page" (Tweet) – via Twitter. https://x.com/trevortimm/status/809385191374553088
"The Official SecureDrop Directory". Freedom of the Press Foundation. Retrieved January 29, 2017. https://securedrop.org/directory
"USA TODAY launches secure whistle-blower site". USA Today. 22 February 2017. https://www.usatoday.com/story/news/2017/02/22/usa-today-network-launches-securedrop-whistleblower-site/98068810/
"ABC launches SecureDrop for whistleblowers to securely and anonymously contact journalists". ABC News. 28 November 2019. https://www.abc.net.au/news/2019-11-28/securedrop-installed-for-contacting-abc-journalists-anonymously/11708200
Sullivan, John (25 March 2017). "SecureDrop and Alexandre Oliva are 2016 Free Software Awards winners" (Press Release). Free Software Foundation. https://www.fsf.org/news/securedrop-and-alexandre-oliva-are-2016-free-software-awards-winners