GHOSTsuite
YOUR PRIVATE WORKSPACE
Everything. In your control.
Communications, connections and files — one secure-first ecosystem.
YOUR APPS
GHOSTsuite
What is actually protected today?
GHOST messenger and phone provide manually paired, temporary browser WebRTC sessions. Drive encrypts selected files locally. Mail has a local composer, import analysis, and provider connector plan. A first-party device-wide VPN, mailbox, persistent message delivery and cloud file storage are not deployed or independently audited.
GHOST / PRIVATE COMMUNICATIONS
Your conversations.
A simpler inbox experience. Contact identity, secure invitations, offline delivery and persistent conversations require the authenticated relay now being engineered.
Connect a second device
Current browser pilot: exchanging WebRTC signals manually. This is not the finished friend-and-contact workflow.
Caller creates an offer. Recipient pastes it and generates an answer. Caller pastes the answer. Both verify the DTLS fingerprint using a separate trusted channel.
Not availableNo peer connected.
Private session
Live only · not savedEncrypted offline message capsule
Send a protected message file through a channel of your choice. This is symmetric AES-256-GCM file encryption, not a Signal conversation or identity-verifying messenger.
Create encrypted message
Local onlyAES-256-GCM · 650,000 PBKDF2-SHA256 iterations · authenticated format.
Read encrypted message
No account requiredA wrong passphrase or modified capsule fails authentication.
Encrypted private Messenger notes
Saved locally · no serverProtect notes in this device's local encrypted archive. No contact, call or conversation is created. Browser storage may be removed by Android or by clearing site data.
No archive operation yet.
GHOSTmessenger signed device identities
P-256 ECDSA · offline pilotCreate a locally encrypted sender signing key and a shareable public identity. Independently verify the public key fingerprint with your correspondent before trusting signed files. This is authenticating a pinned key, not proving a real-world name, hiding metadata, adding post-quantum protection or replacing a full messaging ratchet.
1 · Establish your identity
Store the private .ghostid file and its passphrase safely. Share only .ghostpub.
2 · Sign encrypted message
Signing proves possession of a key, not verified personhood.
3 · Verify sender signature before decrypting
Verification is only meaningful after out-of-band fingerprint confirmation.
The signed message is still encrypted; use the message-capsule decryption tool above with the shared encryption passphrase.
GHOST / UNIFIED COMMUNICATIONS
GHOSTphone
One place to reach your owned mobile, VoIP, Wi-Fi and business numbers. GHOST currently hands off cellular/SMS to the device and supports manually paired browser audio; hosted telephony and number sync require authorized provisioning.
Call or message
Device handoffThese actions open the device dialer or SMS application. GHOST does not originate or intercept cellular calls or text messages.
Number integrations
SIP application handoff
Open a SIP address with an installed compatible calling app. This does not sign in to, or operate, a SIP server.
Open SIP handler ↗Requires an installed SIP-capable application and a provisioned account.
CRM activity export
Prepare a structured contact activity to copy into an authorized CRM. No CRM is connected; nothing is transmitted.
Local export only · no synchronization.
GHOST peer audio
Manual WebRTC pilotNo active call
Pair two browsers in GHOSTmessenger first, then enable your microphone here.
Encrypted private call note
No CRM connectionExport a protected note and destination number to a .ghostcall file. Nothing is stored or synced to a server.
No note exported.
Encrypted private Phone notes
Saved locally · no serverProtect notes in this device's local encrypted archive. No contact, call or conversation is created. Browser storage may be removed by Android or by clearing site data.
No archive operation yet.
GHOST / UNIFIED MAIL
GHOSTmail
One inbox for every authorized identity, without exposing passwords to a browser form. Direct provider connectors need OAuth and a separately secured, deployed mail service; the local composer and import analysis work without them.
Connect every mailbox
Provider adapters are queued for authorized OAuth or delegated access. No account credentials or messages are stored in GHOST today.
No mailboxes connectedCompose in an installed mail app
Use the account already configured on your device; GHOST cannot read its inbox or send on your behalf.
Inspect a mail export locally
Select one .eml file up to 1 MB. GHOST checks envelope metadata locally; it will not upload the email, display its body or add it to a mailbox.
Multi-message migration preflight
Offline · no account accessAnalyze up to 25 local .eml messages (10 MB combined). Detect repeated Message-ID headers and basic import shape without displaying bodies or attachments.
No files analyzed.
GHOSTmail encrypted local archive
Device only · no provider syncSave individual .eml exports to an AES-256-GCM archive on this device. Each record is encrypted with its own random salt and nonce. Email account credentials, inbox messages, metadata and attachments are not retrieved from any provider. Browsers may evict this storage.
No archive operations yet.
GHOST / OWNED NETWORK PRIVACY
GHOSTvpn
A proprietary GHOST-controlled service with our own gateways, device enrollment and policies. Its audited packet encryption can use interoperable WireGuard primitives; proprietary orchestration must not be confused with inventing untested cryptography.
GHOST NETWORK / TUNNEL STATUS
GHOST tunnel offline
No GHOST-owned gateway or verified native tunnel is provisioned on this device. We do not claim your traffic is protected by GHOST.
The current APK does not include this engine; this button unlocks only in a future signed build that implements the native API.Independent gateway · native device tunnel · verified kill switchGHOST network profiles
Select a target profile to see its requirements. These are design profiles, not active server locations.
Selected: Fast. Not available until the GHOST gateway and Android client are commissioned.
Deployment readiness
GHOST VPN routing-policy analyzer
Redacted configs onlyReview a non-secret WireGuard-style routing configuration for missing default IPv4/IPv6 and DNS directives. Never paste a private key, preshared key, API token or password. Input is cleared immediately after analysis and not uploaded.
Never paste real private keys.
DATA / DEVICE-SIDE PROTECTION
GHOSTdrive
Encrypt and decrypt a local file using Web Crypto. Files are never uploaded by this page. The encrypted download is portable; there is currently no GHOST-managed cloud storage or device restore.
Encrypt a file
Encryption runs only inside your browser.
Decrypt a GHOST file
Incorrect passwords or modified ciphertext fail authentication.
Cryptographic restore drill
Read-onlyAuthenticate and decrypt a .ghost file entirely in memory, verify its encrypted header and display a SHA-256 checksum of the restored plaintext without creating another copy.
No authenticated restore test run yet.
GHOSTdrive encrypted device vault
AES-256-GCM · device-onlyStore encrypted files persistently in the browser's private local database. Filenames and file contents are encrypted. This is NOT cloud sync or a verified backup: clearing this app's data can erase the vault permanently.
No encrypted items opened.
Portable GHOSTsuite encrypted backup
User-controlled · cross-deviceExport encrypted records across Mail, Messenger notes, Phone notes and Drive into one portable backup. Content and filenames stay encrypted under their original passphrases. Record count, service type and approximate sizes remain visible in the backup file. It is not remote synchronization or a verified secondary copy until you export and successfully test a restoration.
No backup has been exported or restored.
GHOST / MIGRATION
GHOSTswitch
Understand your data before you move it. The current tool analyzes local contact exports and identifies duplicates, without sending the file to a server or changing an existing account.
Move deliberately.
Keep control.
Local preflight checks are available today. Connected mail, Drive and calendar import workflows are not deployed.
Analyze a contacts export
Choose a .vcf / .vcard or .csv contacts file (up to 1 MB). Nothing is uploaded, saved to our servers, or migrated to your contacts.
Select a file to begin.
Preflight report
GHOST / COMPETITIVE INTELLIGENCE
GHOST vs. the field.
Five established competitors for each of our five launch products. Compare documented capabilities against what GHOST actually implements. No fabricated security scores.
NETWORK PROTECTION
GHOSTvpn
Five direct competitors
Official product documentation2026-10-30 / EVIDENCE-GATED RESCORE
Current capability maturity scores
These are analyst estimates of documented operational maturity, NOT independent performance/security-test results. Scoring rules: 0 absent, 1 engineering pilot, 2 limited operational, 3 documented mature, 4 strong supporting evidence. Planned features never earn production points.
Metric breakdown · six products
How all eight metrics are weighted
For each dimension, level 0–4 is multiplied by its weight divided by 4; eight contributions sum to the 0–100 score. A documented product statement is weaker than an independent audit, and vendor reliability claims are not independently measured here. Treat ±5 points as broadly comparable unless there is category-specific test evidence.
All 30 scored products (including GHOST)
Feature-by-feature matrix
Swipe left for more columnsDocumented Vendor-documented Limited Partial or conditional Not built Absent in GHOST Unverified Not established