loading
hello dummmy text
koncpt-img

About Us
OpenTrader.AI security standards

Our architecture is approved by top-industry engineers, hackers, cloud professionals, and consultants like hackathon winners and Google associates. If you would like to know more about our security standards, please make sure to contact us with your question or concern.

Encryption

All encryption is performed with AES-GCM, a high quality, industry-standard encryption scheme that avoids the pitfalls of using low-level cryptographic libraries. All encryption is performed with 128-bit AES-GCM: The secret’s value is a base64-encoded 128-bit AES key. The encrypted payload is base64 encoded. Encryption is done in AES-GCM, with the IV transmitted as the first 12 bytes of the payload. This standard encryption operation avoids common cryptographic pitfalls.

Whitelisted IP-addresses and coins

We require users to whitelist our IP-adres so API trades can only be initiated by our servers. We require users to whitelist the trading pairs for which they want to trade coins, for example btc-usdt, eth-usdt, etc. In case a hacker would penetrate our multi-layered security and obtains the API keys and secrets, the attacker could not pump and dump low liquidity coins to steal the funds in indirect ways. API withdrawals are always disabled by default by every crypto exchange we support.

Security audits by established 3rd parties

At OpenTrader.AI, we make sure that our software is regularly audited from source code reviews to full pentests. The audits are done by 3rd parties, and the pen-tests run both automatic and manually. We review and test our security standards from technical to operational level. Anyone in the world can request an up-to-date and verified audit report from both OpenTrader.AI as well as the 3rd party security firms that we are collaborating with. Make sure to do this if you have any doubts.

Multi-layered security
We take security serious

At OpenTrader.AI we prioritise security more than anything else. Only minimal parts of our trading engine are connected with the internet. We use semi-automated and the modern AI methods for better coverage. 

Secure Cloud Environment

Everything runs in the cloud. your data will not leave the cloud in any way. The system runs partly disconnected from the internet.

  • Configured By Experts
  • High Security Standards
  • 24/7 Uptime

Serverless Infrastructures

Our trading engine runs on a serverless cloud infrastructure, minimising security risks at many levels.

  • Runs At Scale
  • No Virtual Machines
  • Minimal Dependencies

Paid Bug bounty program

We do everything we could to minimise security risks, if you still manage to find a bug, you will receive a nice reward.

  • Monetary Rewards
  • Lifetime Whale Access
  • Possibility To Meet Team

Multi-layered security

Each layer focuses on securing a specific part that might be compromised by hackers or other types of bad actors.

  • 7 Layer Security
  • Pen-Tested At Every Layer
  • Tech & Non-Tech Measures.

Frequent pentests

Frequent and periodic pen-testing, both manually and automated. Methodologies are frequently updated as well.

  • Pen-tested By Experts
  • Comprenhensive Pentests
  • Frequent, Semi-Automated

Privacy friendly‎

Protecting privacy at every level is key to ensuring human dignity, safety, trust and self-determination.

  • Requires Minimal Data
  • Only Essential Data Stored
  • CCPA, GDPR, and DPIA Compliant
We are there to help
Do You Have Any Questions About Our Security?

Privacy Matters

At OpenTrader.AI, one of our fundamental principles is a commitment to privacy.

Minimal Analytics

While analytics are vital for any thriving application, we only store essential data.

Regulation Compliant

We are compliant with the CCPA, GDPR, and DPIA, and we do more than required.

Open for discussion

If you have any concerns or questions about how we store your personal data let us know!

Blog
Stay Updated with Our Latest Posts

There is always something new to learn about new trends in trading strategies, crypto, AI or security. Subscribe to our blog so you don’t miss out on anything. You can also discuss you ideas with the community in the comments!