Security

SECURITY.md

Security Policy

GhostGate is an educational networking lab. It is not a commercial privacy product and does not guarantee anonymity.

Supported Use

Use GhostGate for:

learning Linux routing
studying DNS and firewall behavior
personal lab experimentation
defensive privacy engineering education

Do not use GhostGate for illegal activity, unauthorized access, abuse, or harmful evasion.

Secrets

Never commit:

WireGuard private keys
SSH private keys
cloud API tokens
dashboard passwords
real production firewall allowlists

The repository contains .example files only.

Reporting Issues

For local lab mistakes, open an issue with:

exact command run
VM role: router, client, or WireGuard server
interface names
ip -br a
ip route
relevant service status

Avoid sharing private keys, public IPs, or credentials in issue text.

There aren't any published security advisories