Every bank today exposes its core servers to the internet. Mobile apps, web dashboards, APIs — all reachable by anyone who knows the URL. Firewalls and WAFs help, but the attack surface exists. What if the servers were simply invisible? Not protected by layers of security — but genuinely unreachable from the public internet. Only the bank's own app, with the Ghost SDK embedded, can find them.
The Problem With Visible Servers
Traditional banking infrastructure is built on a contradiction: servers must be reachable by legitimate apps but hidden from attackers. The result is an arms race of firewalls, rate limiters, and threat detection.
The Solution: Invisible Infrastructure
With the Ghost SDK embedded in the bank's app, the core servers exist only on the Ghost network. The public internet sees marketing pages only. Account management, transactions, balances — all served on Ghost IPs that don't resolve outside the mesh.
How It Works
Bank Integrates the Ghost SDK
The bank embeds the Ghost SDK into their mobile app. This gives the app the ability to join a Ghost network and reach servers that exist only on private IPs. Integration is available under consultation.
Customer Opens an Account
When a customer opens an account, their primary device (phone) is registered to the bank's Ghost network. This can happen automatically via the app when the account is created, or at a physical terminal for in-person onboarding. Either way — it happens once.
Account creation flow automatically registers the device. Customer doesn't even notice.
Customer scans a QR code at the branch. Similar to BiFrost Pass — one scan, device registered.
Add More Devices From Home
Once the primary device is registered, the customer can authorize additional devices from within the app. Tablet, laptop, second phone — all managed by the customer, no branch visit required.
Everyone Else Sees Nothing
Without the bank's app (with Ghost SDK), the banking servers simply don't exist. Any other app, browser, curl command, or bot — connection refused. The attack surface is zero.
Why This Changes Everything
Zero attack surface
You can't attack what you can't find. No public IPs, no exposed endpoints, no server to DDoS.
No credential stuffing
There's no public login page to attack. The login page itself is behind the Ghost network — unreachable without the app.
Device-level trust
Each device is cryptographically registered. Access is not just per-user — it's per-device. Lost a phone? Revoke that one device.
WireGuard-grade encryption
All traffic between the app and servers runs through an encrypted tunnel. Not TLS over public internet — encrypted mesh between verified devices.
Traditional vs Ghost Banking
Traditional Banking
Ghost Banking
Interested in Ghost Banking for your institution? SDK integration is available under consultation.