Ghost runs locally. Your source code is never uploaded to our servers. BYOK — your Anthropic API key, your pipeline.
// api data deleted in 7 days
Anthropic deletes API inputs and outputs within 7 days per their data retention policy. We have no access to that data.
// cancel anytime
No contracts on Pro or Team. Cancel before your next billing date and you're done. Enterprise includes a formal MSA.
// access via GitHub
Pro delivery is GitHub collaborator access to the private repo — granted on subscription, revoked on cancellation. No license keys.
// frequently asked
What's the difference between Ghost Open and Ghost Pro?
Ghost Open (free, MIT) outputs a truncated report — Critical and High findings only, top 4 in PDF. Ghost Pro outputs the full report across all severity levels, with executive-ready PDF framing including business impact tags and dollar estimates. Pro also includes compare mode, checkpoint recovery, and multi-pass analysis.
Do I need my own Anthropic API key?
Yes — Ghost Architect is BYOK (Bring Your Own Key). This is by design: your code goes directly from your machine to Anthropic's API. We never see it. A typical scan costs $0.23 in Anthropic API usage. Most Pro users run 10–20 scans/month — that's $2–5 in API costs on top of the subscription. You can verify this yourself: the cost of every scan is printed in the output.
How does Pro access work after subscribing?
After subscribing, you'll be added as a collaborator on the private GitHub repo within one business day. You'll receive an invite to your GitHub email. Access is revoked if the subscription lapses.
Can I get a demo before subscribing?
Yes. Email support@ghostarchitect.dev or connect on LinkedIn and we'll schedule a 15-minute Teams call with a live scan of a sample codebase.
What languages and platforms does Ghost Architect support?
Ghost Architect works on any codebase, any language, any platform — PHP, JavaScript, TypeScript, Python, Ruby, Java, and more. It's framework-aware and analyzes code structure, dependency relationships, configuration files, and integration patterns regardless of what stack you're running.
Can I use Ghost Architect on a client's private repository?
Yes. Ghost Architect supports private GitHub, GitLab, and Bitbucket repositories. Authenticate with a personal access token, Ghost clones the repo locally, runs the scan, and removes the local clone when done. Your client's code never touches any third-party infrastructure beyond your own Anthropic API key.
