How Newsrooms Keep Sources Safe: The Quiet Tech Stack of Investigative Journalism

Every investigative story you read survived a quiet technical battle you didn't. Before a document leaks to the public, it has to travel from a nervous source to a reporter without leaving a trail – and the tools that make this possible are deliberately boring.

The famous ones are Signal, for disappearing conversations, and SecureDrop, the anonymous submission system running in many major newsrooms. Less discussed is the network layer: a reporter researching a story from a hostile country needs their traffic to look unremarkable, and commercial VPN services – with their well-known IP ranges – are often blocked first.

That is why many outlets run their own infrastructure. A notable piece of it is Outline VPN, created by Google's Jigsaw division specifically so that newsrooms could operate private VPN servers instead of trusting a third party with their traffic. A server that only your own team knows about doesn't appear on any blocklist.

None of this is spy fiction. It is plumbing – and like all good plumbing, it works best when nobody ever has a reason to think about it.