Your production database needs maintenance. The best DBA available is a freelance contractor — brilliant, but also a known hacker. You need him on the database server. You absolutely cannot give him access to anything else on your network. With Ghost Networks, this is a 2-minute setup.
The Problem
Traditional VPNs give contractors access to the entire network. Firewall rules are complex, error-prone, and often left open after the job is done. You need surgical access: one server, two devices, limited time.
Step 1: Create an Isolated Phantom Hub
Create a new Phantom Hub that contains only the database server. Nothing else from your network is visible inside this hub.
The DB server is now in its own bubble. Even if the contractor scans the network, he sees nothing but the database.
Step 2: Generate a BiFrost Pass
Create a BiFrost Pass scoped to this hub. Allow 2 devices (the contractor's laptop and phone) with a 2-day expiration.
That's it. A QR code or link. 2 devices max. 48 hours. Auto-expires.
Step 3: Contractor Scans & Connects
Send the BiFrost link or QR code to the contractor. He opens Ghost Networks on his phone or laptop, scans the code, and selects which devices to connect.
Step 4: Work. Done. Gone.
The contractor does his work on the database. After 2 days, the BiFrost Pass expires automatically. No manual revocation needed.
What the Contractor Sees vs. What Exists
Contractor's view
Only the database server. Cannot ping, scan, or discover any other device on your network. The rest of your infrastructure is invisible.
Your actual network
Dozens of servers, workstations, IoT devices, internal services. None of them are reachable from the contractor's Phantom Hub.
Why This Works
Other Scenarios
External auditor
Give read-only access to financial servers for 1 week
Vendor support
Let a vendor debug their appliance without seeing your network
Pen test team
Scope the engagement to specific servers only
Temporary employee
Day-1 access to their department, auto-revoke on last day