Existing authenticated tools.

GhostKit does not iframe, embed or scrape any administrative app. This avoids leaking credentials, breaking CSP, or accidentally storing authenticated data inside GhostKit. It only ever provides a safe launcher link.

Console

Administrative console

Launch /console/

Toolkit

Internal case-management toolkit

Launch /toolkit/

Recommended separation

/ghost/ — public safety/privacy toolkit; no authentication; no storage.
/console/ and /toolkit/ — authenticated administration/case-management; keep separately protected (e.g. HTTP auth, VPN, or your app's own login).
Never put administrator passwords, API keys or secrets in GhostKit's public JavaScript or PHP.
Keep backups and server logs outside the public web root.
To add another linked app, edit the $related_apps array near the top of index.php.