Freedom of the Press Foundation (FPF)

The contractor will conduct application security reviews and threat modeling for SecureDrop components and architectural changes. They will also advise on hardening strategies and integrate security automation tooling to mitigate vulnerabilities.