The article discusses the cybersecurity challenges of using digital tools to detect breaches under whistleblowing procedures. The implementation of the Whistleblower Protection Directive in Poland may lead to the emergence of dedicated web applications on a massive scale, both in the public and private sectors. Entities that will use them as a channel for receiving reports must take into account risks to the confidentiality, integrity and availability of sensitive data processed in the applications. From the point of view of effective handling of tips by obliged entities and public authorities, there is a need to develop a minimum standard for security requirements for online platforms and their verification to be applied to providers.