☠ CONSULTING SHOP LIVE DEMO BLOG TOOLS AFFILIATES INVESTORS
☠ GHOSTPORT ZHOP SCORE: 92 IDS: 0 RAP: 0 ADS: 12,847 CLIENTS: 7 CPU: 14% · 48°C
SECURITY IS NOT A FEATURE, IT'S THE FOUNDATION

Your ISP is selling you.

GhostPort sits between your house and all of it. Source available. Independently pen-tested. No subscription, ever.

ORDER — $299 TRY THE OS →
311+
BUGS DOCUMENTED
16
AUDIT ROUNDS
632
PACKETS DROPPED / 10H
110
NIST CONTROLS MAPPED
0
LOGS STORED
GhostPort device with pirate flag, dual antennas, clear case
THE BOX

It flies a flag for a reason.

Clear case, because you should be able to see what is in it. Two antennas, dual-radio watchdog. Sits behind your router, not in place of it.

  • HARDWARERaspberry Pi 5, active cooling, industrial storage
  • TESTED3,330 Mbps · 0.023ms jitter, dual-tunnel
  • OSPhantom OS — 612 packages stripped out
  • RECOVERYTunnel watchdog, radio watchdog, multi-region failover
  • SHIPS FROMNevada. Assembled and burned in by hand.
ONE COMMAND · UNDER TWO SECONDS

Four modes. Pick one.

Separate nftables profiles that swap without dropping your connection. Watch the score in the bar above change.

Z-Hop

 

DNS FILTERon
DoH / DoT BLOCKon
WIREGUARDon
THROUGHPUTreduced
NO SEVERITY THEATRE

What it catches, in its own words.

CROW'S NEST · INTRUSION

Something is phoning out

Traffic patterns that mean a device is talking somewhere it shouldn't.

14:02:11 outbound to flagged range
  192.168.4.31 · blocked
  device "Living Room TV"
STONEFISH · ARP SPOOFING

Something is pretending to be the router

How traffic gets quietly intercepted on a LAN you assumed was safe.

09:41:55 gateway MAC changed
  d8:3a:dd → 4c:11:ae
  alert · held
SONAR · HIDDEN RADIOS

Your gateway has five radios

One customer unplugged a Cox gateway and five BSSIDs vanished. Four were hidden.

scan complete · 5 BSSID
  1 declared · 4 hidden
  vendor CoxWiFi
THE MANIFEST

Everything aboard, and what it cost us.

Most companies bury this. Here it is up front, so you can decide whether the rest is worth paying for.

CARGO MANIFEST — PHANTOM OSEVERY COMPONENT · EVERY LICENSE
ComponentLicenseWhat it doesCost to us
Pi-holeEUPL-1.2DNS ad and tracker blocking$0.00
WireGuardGPL-2.0The encrypted tunnel$0.00
nftablesGPL-2.0Firewall profiles behind each mode$0.00
Raspberry Pi OSGPL & othersThe base underneath$0.00
Phantom OSElastic 2.0Our modes, hardening, Command Deck$0.00
On that last line. Phantom OS is source available, not open source. Read every line, build one for yourself free. The license only stops someone reselling it as a competing product. That is the single thing held back, and we would rather say it than call it open source and hope nobody checks.
HEAD TO HEAD

Compared honestly.

PROPRIETARY BLACK BOX

vs Firewalla

Source-available transparency against firmware you cannot read. Feature by feature.

READ → DIFFERENT PROBLEM

vs GL.iNet

Travel routers and dedicated privacy hardware solve different things. Here's which.

READ → OWNED BY AMAZON

vs eero

Amazon owns eero. Amazon is the world's largest ad company. Connect the dots.

READ →
ONE TIME
$299 USD
PAID ONCE · NOTHING RECURRING
  • Assembled Pi 5, cooled, burned in, flag included
  • Phantom OS, four modes, hardened
  • Command Deck dashboard with TOTP
  • Family Shield
  • Tested updates for the life of the hardware
  • Support from the person who wrote the code

The only American privacy router whose source you can read before you buy it. Built by a Marine Corps data systems administrator.

ORDER NOW BUILD YOUR OWN, FREE
NOT BUYING A BOX?

Hire the person who built it.

Network hardening, privacy architecture and security review for businesses and households. Same hands, same standards, applied to whatever you already run.

CONSULTING →

Privacy alerts, direct.

ISP tracking, surveillance legislation, breach digests. No tracking pixels. No third-party senders.