YOUR PRIVATE WORKSPACE

Everything. In your control.

Communications, connections and files — one secure-first ecosystem.

YOUR APPS

GHOSTsuite

6 services

Get startedExplore tools that work in the current pilot.

What is actually protected today?

GHOST messenger and phone provide manually paired, temporary browser WebRTC sessions. Drive encrypts selected files locally. Mail has a local composer, import analysis, and provider connector plan. A first-party device-wide VPN, mailbox, persistent message delivery and cloud file storage are not deployed or independently audited.

GHOST / PRIVATE COMMUNICATIONS

Your conversations.

A simpler inbox experience. Contact identity, secure invitations, offline delivery and persistent conversations require the authenticated relay now being engineered.

Pilot · no saved inbox

ChatsActive peer sessions appear below. No fabricated messages or contacts.

No server mailbox

Connect a second device

Current browser pilot: exchanging WebRTC signals manually. This is not the finished friend-and-contact workflow.

Disconnected

Caller creates an offer. Recipient pastes it and generates an answer. Caller pastes the answer. Both verify the DTLS fingerprint using a separate trusted channel.

Paste incoming offer / answer

My outgoing signal — send privately to the peer

Remote DTLS fingerprint:Not available

No peer connected.

Private session

Live only · not saved

G

New direct conversationConnect an authenticated peer to begin. No chat backup or offline delivery yet.

No messages yet. Establish the encrypted peer connection first.

Transport uses WebRTC encryption. Not Signal's Double Ratchet, verified contacts, offline delivery or independent audit. Peers may see connection metadata and IP addresses.

Encrypted offline message capsule

Send a protected message file through a channel of your choice. This is symmetric AES-256-GCM file encryption, not a Signal conversation or identity-verifying messenger.

Create encrypted message

Local only

Message Unique shared passphrase (16+ characters)

AES-256-GCM · 650,000 PBKDF2-SHA256 iterations · authenticated format.

Read encrypted message

No account required

Received .ghostmsg Shared passphrase

Decrypted text — never automatically copied

A wrong passphrase or modified capsule fails authentication.

Identity limitation: Anyone with the shared passphrase can create a capsule. This does not authenticate the sender, prevent phishing, hide the fact that a file was shared, or provide forward secrecy. For sensitive conversations, a verified cryptographic identity protocol and an independently reviewed messenger backend remain required.

GHOST / UNIFIED COMMUNICATIONS

GHOSTphone

One place to reach your owned mobile, VoIP, Wi-Fi and business numbers. GHOST currently hands off cellular/SMS to the device and supports manually paired browser audio; hosted telephony and number sync require authorized provisioning.

Call or message

Device handoff

Phone number Route

Open dialer ↗Text with device ↗

These actions open the device dialer or SMS application. GHOST does not originate or intercept cellular calls or text messages.

Number integrations

◉Cellular · LTE / 5G / legacy GSM / CDMAAndroid dialer and default-SMS role where supported. Carrier controls the network.Device

◎Wi-Fi-only · VoIP · SIP / WebRTCPhone-number or SIP-trunk provisioning and signaling are required.Planned

▤Business · DID · CRMTwilio, Telnyx, PBX, HubSpot, Salesforce, Zoho and custom APIs are adapter targets.Planned

SIP application handoff

Open a SIP address with an installed compatible calling app. This does not sign in to, or operate, a SIP server.

SIP addressOpen SIP handler ↗

Requires an installed SIP-capable application and a provisioned account.

CRM activity export

Prepare a structured contact activity to copy into an authorized CRM. No CRM is connected; nothing is transmitted.

Activity note (optional)

Local export only · no synchronization.

GHOST peer audio

Manual WebRTC pilot

No active call

Pair two browsers in GHOSTmessenger first, then enable your microphone here.

Limits: This is not a replacement SIM, carrier dialer, emergency service, live CRM integration, phone-number host or Signal-grade calling. Browser audio needs manual peer pairing and usable NAT connectivity.

Encrypted private call note

No CRM connection

Export a protected note and destination number to a .ghostcall file. Nothing is stored or synced to a server.

Call note Export passphrase (16+ characters)

No note exported.

GHOST / UNIFIED MAIL

GHOSTmail

One inbox for every authorized identity, without exposing passwords to a browser form. Direct provider connectors need OAuth and a separately secured, deployed mail service; the local composer and import analysis work without them.

GHOSTmail▣ Unified inbox◇ Drafts➤ Sent☆ Starred▤ Archive

✉

Connect every mailbox

Provider adapters are queued for authorized OAuth or delegated access. No account credentials or messages are stored in GHOST today.

No mailboxes connected

Google / GmailOAuth · Gmail APIConnector backend required

Microsoft 365 / OutlookOAuth · Microsoft GraphConnector backend required

Other hosted mailIMAP / SMTP / JMAPSecure credential broker required

Encrypted mail / archivesApproved export / desktop bridgeNo direct Android Bridge shortcut

Compose in an installed mail app

Use the account already configured on your device; GHOST cannot read its inbox or send on your behalf.

RecipientSubjectMessage

Inspect a mail export locally

Select one .eml file up to 1 MB. GHOST checks envelope metadata locally; it will not upload the email, display its body or add it to a mailbox.

Local .eml export

No file analyzed.

Multi-message migration preflight

Offline · no account access

Analyze up to 25 local .eml messages (10 MB combined). Detect repeated Message-ID headers and basic import shape without displaying bodies or attachments.

Select .eml files

No files analyzed.

Security boundary: Imported mail requires sender verification, protected credentials, encryption keys, abuse and spam controls, migration reconciliation and verified restores. Connecting a provider does not automatically make standard SMTP email end-to-end encrypted.

GHOST / OWNED NETWORK PRIVACY

GHOSTvpn

A proprietary GHOST-controlled service with our own gateways, device enrollment and policies. Its audited packet encryption can use interoperable WireGuard primitives; proprietary orchestration must not be confused with inventing untested cryptography.

◇

GHOST NETWORK / TUNNEL STATUS

GHOST tunnel offline

No GHOST-owned gateway or verified native tunnel is provisioned on this device. We do not claim your traffic is protected by GHOST.

Independent gateway · native device tunnel · verified kill switch

GHOST network profiles

Select a target profile to see its requirements. These are design profiles, not active server locations.

FastDirect GHOST gateway · low latency PrivateOwned DNS · leak prevention Multi-hopMultiple independently routed gateways Work / SchoolScoped resources and split tunnel policies

Selected: Fast. Not available until the GHOST gateway and Android client are commissioned.

Deployment readiness

Browser network stateChecking…

GHOST-controlled gatewayNot provisioned

Native Android VpnService + tunnel engineNot installed

Device identity & peer keysNot enrolled

DNS / IPv6 leak + kill switch validationNot tested

Release gate: WireGuard-class native transport, locked-down gateway, revocable keys, resilient routing, DNS/IP leak tests, always-on policy, independent review. No false Connect button.

GHOST VPN routing-policy analyzer

Redacted configs only

Review a non-secret WireGuard-style routing configuration for missing default IPv4/IPv6 and DNS directives. Never paste a private key, preshared key, API token or password. Input is cleared immediately after analysis and not uploaded.

Redacted configuration (no secrets)

Never paste real private keys.

DATA / DEVICE-SIDE PROTECTION

GHOSTdrive

Encrypt and decrypt a local file using Web Crypto. Files are never uploaded by this page. The encrypted download is portable; there is currently no GHOST-managed cloud storage or device restore.

Encrypt a file

Select up to 5 local files (20 MB each, 30 MB combined)New file passphrase (12+ characters)

Encryption runs only inside your browser.

Decrypt a GHOST file

Select .ghost fileFile passphrase

Incorrect passwords or modified ciphertext fail authentication.

Cryptographic restore drill

Read-only

Authenticate and decrypt a .ghost file entirely in memory, verify its encrypted header and display a SHA-256 checksum of the restored plaintext without creating another copy.

Encrypted .ghost file Original passphrase

No authenticated restore test run yet.

Format: GHOST file v1 · PBKDF2-SHA256 with 310,000 iterations · AES-256-GCM with unique 16-byte salt and 12-byte IV. No recovery escrow. A file download is not a verified backup; maintain an independent copy and restore-test it before deleting anything.

GHOST / MIGRATION

GHOSTswitch

Understand your data before you move it. The current tool analyzes local contact exports and identifies duplicates, without sending the file to a server or changing an existing account.

⇄

Move deliberately.
Keep control.

Local preflight checks are available today. Connected mail, Drive and calendar import workflows are not deployed.

LOCAL PREVIEW

Analyze a contacts export

Choose a .vcf / .vcard or .csv contacts file (up to 1 MB). Nothing is uploaded, saved to our servers, or migrated to your contacts.

Local contact file

Select a file to begin.

Preflight report

Your local contact summary appears here after analysis.

Migration boundary: Analysis is not import. No account sign-in, provider login, contact write, mail migration or cloud synchronization occurs. Keep the source export; verify a separate backup and test restore before deleting anything.

GHOST / COMPETITIVE INTELLIGENCE

GHOST vs. the field.

Five established competitors for each of our five launch products. Compare documented capabilities against what GHOST actually implements. No fabricated security scores.

25Direct competitors

5Product categories

0Unproven security claims

NETWORK PROTECTION

GHOSTvpn

Sources reviewed Oct 2026

Five direct competitors

Official product documentation

Feature-by-feature matrix

Swipe left for more columns

Documented Vendor-documented Limited Partial or conditional Not built Absent in GHOST Unverified Not established

Methodology: Each category uses a curated set of five relevant competitors, not an objectively ranked global top five. Competitor capability claims are drawn from linked official documentation; platform and subscription differences apply. GHOST states come from its source and verified deployment, not roadmap promises. This is a feature comparison, not an independent penetration test or proof that any product is more secure.

Everything. In your control.

GHOSTsuite

Your conversations.

Connect a second device

Private session

Encrypted offline message capsule

Create encrypted message

Read encrypted message

GHOSTphone

Call or message

Number integrations

SIP application handoff

CRM activity export

GHOST peer audio

No active call

Encrypted private call note

GHOSTmail

Connect every mailbox

Compose in an installed mail app

Inspect a mail export locally

Multi-message migration preflight

GHOSTvpn

GHOST tunnel offline

GHOST network profiles

Deployment readiness

GHOST VPN routing-policy analyzer

GHOSTdrive

Encrypt a file

Decrypt a GHOST file

Cryptographic restore drill

GHOSTswitch

Move deliberately.Keep control.

Analyze a contacts export

Preflight report

GHOST vs. the field.

GHOSTvpn

Five direct competitors

Feature-by-feature matrix

Move deliberately.
Keep control.