Security

Privacy without security is only a promise.

Ghosium treats secure updates, risky navigation, permissions and responsible disclosure as parts of one browser security model.

Update integrity

Release packages should be signed and verifiable before installation.

HTTPS-first

Prefer encrypted navigation and make insecure downgrades visible.

Site isolation

Rely on modern process boundaries and upstream Chromium security architecture.

Permission Guard

Keep camera, microphone, location and notification access under explicit site control.

Download protection

Surface executable and suspicious-download risk before a file is opened.

Rapid patching

Track upstream Chromium security releases and prioritise critical fixes.

Responsible disclosure

If you believe you found a vulnerability in Ghosium or this website, report it privately to security@ghosium.com . Include reproducible steps, affected versions and expected impact where possible.

Machine-readable security contact information is also available at /.well-known/security.txt.

Website hardening

The public website uses HTTPS redirection, a restrictive Content Security Policy, anti-framing protection, local assets and protected server-side application files.