Digital Defenders Partnership strengthens digital security for civil society under threat

Digital Defenders Partnership strengthens digital security for civil society under threat | Photo: Clem Onojeghuo

Published on 13 July 2026 at 00:45 GMT

By Editorial Team SDG16

Digital Defenders Partnership is an international programme that helps human rights defenders, journalists and civil society organisations respond to digital attacks and build stronger protection over time. Its role has become increasingly important as surveillance, account takeovers, malware, online harassment and internet restrictions become routine features of political repression, conflict and shrinking civic space.

Established in 2012 and hosted by Hivos, the partnership provides funding, accompaniment, training and practical resources for people whose public-interest work exposes them to digital threats. Its 2024 to 2027 strategy describes a holistic approach intended to strengthen the resilience of human rights defenders rather than treating cybersecurity as a narrow technical problem.

This distinction matters because an attack on a civil society organisation can have consequences beyond damaged equipment or inaccessible accounts. A compromised email address may expose confidential sources. Stolen credentials may reveal networks of activists. A disabled website can interrupt reporting during an election or political crisis. Digital intimidation may also produce fear, exhaustion and self-censorship.

Digital Defenders Partnership works across three broad areas: incident response, sustainable protection, and community building. These activities are designed to connect immediate assistance with longer-term organisational change. An emergency grant may help contain a current attack, while training and accompaniment can reduce the likelihood that the same weakness will cause further harm.

Its Incident Emergency Fund is a rapid-response mechanism for human rights defenders, journalists, activists and organisations facing digital threats or attacks. The fund can provide flexible resources when conventional grant processes would be too slow for an urgent situation.

Rapid funding is particularly relevant because digital incidents often develop quickly. Attackers may attempt to seize accounts, publish private information, interfere with communications or destroy evidence. Civil society organisations operating with limited budgets may not have specialist staff, replacement equipment or trusted technical assistance available when a crisis begins.

Emergency support must nevertheless be handled carefully. Poorly coordinated intervention can increase risk, particularly when sensitive information is transferred to unfamiliar providers. Effective incident response therefore depends on confidentiality, informed consent, secure communication and a realistic understanding of the organisation’s political environment.

The partnership’s model recognises that technical protection cannot be separated from physical and psychological safety. A person facing online threats may also be exposed to arrest, workplace pressure, family intimidation or public harassment. Security planning must consider how technology interacts with these wider conditions rather than assuming that a new tool will solve the underlying problem.

This is reflected in digital protection accompaniment, an approach that supports organisations through a continuing process rather than a single training session. The model can include risk assessment, organisational planning, equipment, infrastructure changes and additional forms of support. The partnership’s guidance presents accompaniment as a method for developing practical security measures around the needs and capacities of each organisation.

One-off workshops can improve awareness, but they may have limited value when participants return to institutions without the time, authority or resources to implement what they have learned. Long-term accompaniment allows security practices to be tested, revised and incorporated into routine work.

This process may involve basic but consequential questions. Organisations need to decide who can access sensitive files, how accounts are recovered, where backups are stored and what happens when a device is lost or confiscated. They must also consider how to communicate during an internet shutdown and how to protect information about staff, partners and communities.

The partnership also supports digital security trainers and rapid responders. This community-based dimension is important because civil society groups often need assistance from people who understand local languages, political conditions and cultural practices. International expertise may be useful, but it cannot automatically replace regional knowledge and relationships of trust.

Networks of practitioners can distribute expertise more widely and reduce dependence on a small number of global organisations. They can also identify patterns across incidents, such as repeated phishing campaigns, spyware targeting or coordinated harassment. Shared learning may help defenders recognise threats before they spread further.

Digital Defenders Partnership develops resources for this wider protection community. The Digital First Aid Kit, for example, is intended to help rapid responders, trainers and technically experienced activists address common digital emergencies. Its purpose is not to replace professional incident handling, but to provide structured initial guidance when a problem emerges.

The need for this infrastructure has grown as digital technologies become essential to civic participation. Journalists use encrypted communication to protect sources. Human rights groups collect evidence of abuses. Community organisations rely on messaging platforms to coordinate services and public campaigns. When these systems are compromised, the ability to document events and organise collectively can also be weakened.

The threat environment is uneven. Well-resourced actors may use sophisticated surveillance tools, while many attacks rely on ordinary weaknesses such as reused passwords, deceptive messages or outdated software. Smaller organisations may face the same adversaries as major institutions but lack dedicated security teams and reliable funding.

Gender, race, disability, sexuality, geography and political status can also shape digital risk. Women and members of marginalised communities frequently experience targeted abuse that combines attacks on their professional work with discriminatory or personal intimidation. A standardised security programme may fail when it does not account for these differences.

The partnership’s current strategy states that feminist and decolonial practices should be placed at the centre of its work. In practical terms, this suggests greater attention to power, inequality and who controls security decisions. It also raises an important test for implementation: whether local organisations genuinely shape priorities or remain recipients of programmes designed elsewhere.

Funding arrangements create additional tensions. Emergency grants must be delivered quickly, but donors and host institutions also require financial controls and evidence of responsible expenditure. Detailed reporting can improve accountability, yet excessive documentation may burden organisations responding to dangerous situations.

Confidentiality further complicates impact measurement. Publishing specific information about incidents, recipients or protection methods could expose the people being supported. The partnership’s own learning materials acknowledge that evaluation must balance qualitative and quantitative evidence with security and privacy.

As a result, the public may find it difficult to assess some outcomes independently. The prevention of harm is less visible than a completed project, and successful security work often depends on discretion. Responsible evaluation must therefore examine institutional changes and the experiences of supported organisations without demanding disclosures that could place them at risk.

Digital Defenders Partnership operates within a broader civil society ecosystem. Access Now runs a free Digital Security Helpline providing rapid technical assistance to activists, journalists and human rights defenders. Its service illustrates the continuing need for specialist support that is accessible across borders and time zones.

Other relevant actors include Front Line Defenders, which provides protection support for human rights defenders, and the Committee to Protect Journalists, which addresses threats against media workers. These organisations have different mandates, but their work intersects when digital attacks form part of wider efforts to silence public-interest reporting or activism.

The partnership’s activities connect most directly with SDG 16 (peace, justice and strong institutions). This goal includes protecting fundamental freedoms and ensuring public access to information. Journalists and civil society organisations cannot perform these functions safely when their communications, evidence and networks remain exposed to attack.

There is also a relevant connection with SDG 5 (gender equality) where digital violence and surveillance disproportionately restrict the participation of women and gender-diverse defenders. The connection is not automatic, however. It depends on whether protection programmes recognise unequal risks and provide support that is accessible to affected communities.

Digital security should not be treated as a substitute for political accountability. Training an activist to improve account protection does not remove the responsibility of governments to prevent unlawful surveillance, investigate threats or protect civic freedoms. Nor does it absolve technology companies when insecure products, weak reporting systems or opaque decisions increase harm.

The public-interest value of Digital Defenders Partnership lies in its attempt to bridge emergency action and structural resilience. Its funding can help organisations survive immediate crises, while accompaniment and practitioner networks can strengthen protection beyond a single incident.

Its effectiveness ultimately depends on trust, local expertise, sustainable resources and careful accountability. In an environment where digital attacks increasingly accompany political repression, defending civil society requires more than technical advice. It requires protection systems that allow those documenting abuses, reporting the news and organising communities to continue their work without carrying the burden of digital risk alone.

Further information:

* Digital Defenders Partnership, the official website outlines its emergency funding, accompaniment, training resources and support for the digital protection community. https://www.digitaldefenders.org/

* Hivos, the host organisation provides institutional context for the partnership and its wider work supporting civic rights and social change. https://hivos.org/

* Access Now, its Digital Security Helpline offers related rapid-response technical assistance for civil society, journalists and human rights defenders. https://www.accessnow.org/help/

* Front Line Defenders, the organisation provides protection resources and emergency support for human rights defenders at risk. https://www.frontlinedefenders.org/

* Committee to Protect Journalists, the organisation documents threats to journalists and provides safety and emergency assistance resources. https://cpj.org/