Nested multi-hop
Two to three hops, each in a separate country and separate legal regime.
Ghost node network · in developmentPanthera
v0.9 · multi-hop core
Panthera
Ghost VPN
v0.9 · multi-hop coreA double-country, multi-hop encrypted tunnel. No logs, no identity, no single jurisdiction. Your traffic leaves as noise and arrives as nothing anyone can trace back.
Route
2–3 country hops
Cipher
ChaCha20-Poly1305
Handshake
Noise IK · X25519
Logs kept
0 bytes
Tunnel
WireGuard-class
Obfuscation
Shadowsocks + XOR
DNS
Encrypted, in-tunnel
Keys
Rotated every 90s
Storage
RAM-only nodes
Kill switch
Kernel level
Protocol
The Ghost Route
Every session builds a fresh chain across at least two legal jurisdictions. The entry node knows who you are but never where you go. The exit node knows where you go but never who you are. No node ever holds both halves — and none of them can be compelled to produce what they never stored.
- 01
Client seal
Traffic is wrapped in nested layers on your device. Each hop can peel exactly one.
- 02
Entry hop
Jurisdiction A. Sees your encrypted stream and nothing else. RAM-only, no disk.
- 03
Cross-border relay
Jurisdiction B, deliberately outside A's legal reach. Re-times and re-pads every packet.
- 04
Exit hop
Jurisdiction C or B. Emits clean traffic under a shared IP used by many ghosts at once.
Security layers
Nine layers deep
Extra security is not a setting here — it is the default and it cannot be turned off.
Per-session keys
Ephemeral X25519 keys, rotated every 90 seconds. Forward secrecy end to end.
Traffic obfuscation
Your tunnel looks like ordinary HTTPS to any observer or DPI system.
Packet padding
Uniform packet sizes and timing jitter defeat size and rhythm fingerprinting.
RAM-only nodes
Diskless servers. A seizure or reboot destroys everything that ever existed.
Encrypted DNS
All resolution happens inside the tunnel. No leak, no ISP visibility, ever.
Quantum-resistant
Hybrid X25519 + ML-KEM handshake against harvest-now-decrypt-later.
Kernel kill switch
If the tunnel drops for a millisecond, all traffic stops. No fail-open.
Anonymous accounts
No email, no phone, no name. A passphrase is the whole identity.
Worldwide coverage
Ghost nodes on every continent
Chains are built from privacy-friendly jurisdictions and never routed twice through the same alliance bloc when you enable Strict Mode.
Europe
Iceland · Switzerland · Netherlands · Romania · Sweden
Americas
Canada · Panama · Costa Rica · Brazil · Chile
Asia-Pacific
Japan · Singapore · Hong Kong · Australia
Africa & Middle East
South Africa · Israel · UAE
40+
Countries
180+
Ghost nodes
10 Gbps
Per-node uplink
0
Logs stored
Multilingual
Speaks your language
Full interface, support and documentation in six languages, with client-side locale detection that never phones home.
EN
English
ES
Español
FR
Français
DE
Deutsch
NL
Nederlands
RU
Русский
S.E.M.S integration
One protocol, two shields
Ghost is built as an extension of the Panthera S.E.M.S Protocol. Your messages are already unreadable — Ghost makes the fact that you sent them unobservable. Same passphrase identity, same zero-trust model, one encrypted transport.
- S.E.M.S traffic auto-routes through the Ghost tunnel
- Shared passphrase identity — no second account
- Metadata resistance: nobody sees who talks to whom
- Both fail closed: no tunnel, no transmission
Compare
Ghost vs. the rest
| Typical VPN | Panthera Ghost | |
|---|---|---|
| Hops | 1 server | 2–3 across countries |
| Jurisdictions | One | Deliberately split |
| Storage | Disk servers | RAM-only |
| Identity | Email + payment | Passphrase only |
| Post-quantum | Rarely | Hybrid by default |
| Obfuscation | Optional add-on | Always on |
Desktop app
Ghost for your machine
The Ghost desktop shell runs the control panel natively. Keys are generated on-device; the app never uploads them. Import the generated tunnel into WireGuard to connect.
macOS
macOS build on request
Unsigned builds — your OS will ask you to confirm the first launch.
Disappear properly.
Ghost access is issued in limited waves while the node network expands.
Request access →No email required. Access codes are generated client-side.