Hush Line

@hushline.app

Hush Line is a free & open-source whistleblower platform that provides secure, anonymous tip lines with no self-hosting, maintenance, or technical overhead.

Myth: Email authentication needs the body and attachments. Reality: Hush Line Email Validation works with Raw Email Headers to inspect DKIM, SPF, and DMARC. Recipient teams can leave the contents in place. Headers may expose addresses and delivery paths, so protect them too.

Light-mode Hush Line social graphic titled “Validate headers without copying the email body.” A desktop Tools screenshot shows Email Validation with a Raw Email Headers field, Validate Headers, Download Report, and a Validation Summary saying the email appears to originate from the stated sender. The graphic contrasts the myth that the whole email is required with the reality that the tool uses its headers.

Staff turnover changes who should receive tip email. Revisit Notifications: confirm the current delivery role, use the Hush Line inbox when it covers the workflow, and send encrypted tip contents by email only when required. Make this an offboarding task.

Light-mode Hush Line social graphic with the headline "Check who gets tip email after a role change." It shows Settings > Notifications with Tip Notifications turned on and three private recipient email addresses—editor, standards, and board—each labeled Enabled and PGP key configured. The image supports the principle that a whistleblowing process should be reviewed when staff responsibilities change.