Guides & explainers

Practical knowledge for your team

Clear, practical guidance on security, infrastructure, and source protection for organizations handling sensitive work.

All articles
Technical Why your Mac isn't logging what you think it is macOS keeps far less log history than most people assume. A technical explainer for newsrooms and small teams on Unified Logging attrition, why point-in-time collection fails, and what continuous, managed telemetry actually requires. Explainer · 7 min read Workspaces Data residency explained: what it means and when it matters A clear explainer on data residency, data sovereignty, localization, and why location matters for organizations handling sensitive information. Explainer · 4 min read Security Incident response planning when you don't have a security team A practical incident response planning guide for nonprofits, newsrooms, and small NGOs that do not have a dedicated security team. Guide · 5 min read Press freedom Securing source communications: a practical guide for newsrooms A practical guide for newsrooms on protecting source communications with threat modeling, encrypted messaging, anonymous tip lines, and organizational security practices. Guide · 4 min read Press freedom What is SecureDrop — and should your newsroom deploy one? An overview of SecureDrop, what anonymous tip line infrastructure requires, who it is for, and when a newsroom should consider deploying it. Explainer · 5 min read Workspaces Why we build Workspaces on open source infrastructure Why Secure Origin favors open source building blocks for sensitive workspaces, auditability, portability, resilience, and reduced vendor lock-in. Perspective · 4 min read Nonprofits & NGOs Why your funder is asking about cybersecurity — and what to tell them A practical guide for nonprofits and NGOs on why funders ask cybersecurity questions, what they expect, and how to build credible answers. Guide · 4 min read
Request review Book call