Digital protection for human rights defenders

We run digital protection for human rights defenders.

Investigative teams, legal clinics, and advocacy organizations hold sources, clients, staff, and campaign data. We run managed security on the devices, passwords, and inbound mail you already use. That layer sits between security training and the helpline.

Public-interest work, checked independently
PBS The Southlander
What we protect

Managed security. Kept on.

We enroll the laptops, watch devices and logins, filter inbound mail, and stay on it when something breaks. You keep the tools you already use. Public-interest reporting and organizing inform how that layer is designed.

01

We protect the devices

Enrollment, encryption, patching, and monitoring on the machines people already use. We see which laptops are covered and act when one is missing, stale, or gone.

02

We protect the identities

Shared passwords and passkeys go in a vault. We watch logins and cut access when something looks stolen.

03

We protect inbound mail

Lookalike mail and credential lures get filtered. You stay on Google Workspace or Microsoft 365.

04

We stay on the work

Alert triage and a named person when a laptop is lost or an account is locked. How we reach a device is written down before enrollment.

How we work

Review. Enroll. Stay on it.

A short preview. The full engagement sequence — written scope, access rules, and how we adapt — is on How we work.

01
Baseline Review
Thirty minutes on who you are and what is in front of you. We say what we would run and what it costs.
02
Enroll and watch
Laptops, vault, and inbound mail. You keep Google Workspace or Microsoft 365.
03
Help when something breaks
Lost laptop, locked account, or a funder security question: a named person answers.

If you are mid-incident and not a client, start with the Access Now Digital Security Helpline or the Digital First Aid Kit. We run the days in between. We reply within one business day.

Who we work with

Human rights defenders, in practice.

If you hold other people's risk, you fit.

Investigative teams
Reporting devices, shared accounts, and unpublished work. The same operational layer as everyone else on this page.
Investigations · public-interest reporting · research desks
Book a Baseline Review
Legal aid and litigators
Privileged files on ordinary laptops and ordinary email. We run the protection around that work.
Legal-aid clinics · civil-rights litigation · legal nonprofits
Book a Baseline Review
Advocacy organizations
Staff accounts, campaign materials, and field communications.
Frontline advocacy · community defense · campaign shops
Book a Baseline Review
Workspaces

Need a place to hold the work?

Managed security covers devices and mail. Workspaces give your team a private space for files, documents, and collaboration — with backups and an export path so you own the data.

Explore Workspaces
Independent check

Proven where the work is public-interest.

We tested whether detections and response times held up for PBS under realistic attack scenarios.

"Secure Origin worked with us on a purple team engagement to validate our detections and test whether our response SLAs held up against realistic attack scenarios. The engagement clearly showed where detections and processes worked as expected and where gaps existed, backed by concrete evidence rather than assumptions. It helped us prioritize improvements that directly strengthened our SOC operations and detection quality."
Rahman Shah, Director of Cybersecurity, PBS
Questions

Short answers

Who is this for if we are not a newsroom?
Human rights defenders in practice: investigative teams, legal-aid clinics and litigators, and advocacy organizations. If you handle other people's risk, you fit.
What if we are already in an incident?
If you are mid-incident and not a client, use the Access Now Helpline or the Digital First Aid Kit. Email us as well if a device is in someone else's hands. We reply within one business day.
Do we have to move off Gmail or Microsoft 365?
No. You stay on the mail you already use.
Start here

A 30-minute Baseline Review. That is the whole first step.

Bring headcount, what you work on, and whether anything is on fire. We will say what we would run and what it costs. You do not need to pick a package.

Response within one business day
Written scope and pricing before work starts

Do not include source names, client names, or case facts in this form.

Book the 30-minute call
Book a review Book call