Security
Security built in, by design.
Aegis is read-only. It never places, modifies, or closes trades. The platform that enforces your discipline has no power to touch your orders. This separation is the foundation of trust.
Read. Analyze. Alert. Never execute.
Your Broker
—
Read-Only
OAuth 2.0 with read scope only. No execution rights granted. No passwords stored.
Never Executes
Aegis Engine
—
Analyze
Rules engine, behavior AI, and exposure analytics. Computed locally or on encrypted pipelines.
You
Alert & Protect
Full-screen prompts, notifications, and locks. Platform-level protection, never order-level.
Secure Auth
Connect via broker OAuth. No passwords stored. Revoke access anytime.
Local Encryption
API tokens encrypted client-side. Zero-knowledge architecture.
Never Executes
Aegis holds no execution right. Monitors and protects only.
Enterprise Ready
Penetration testing. Full audit logging. Data portability.
Trust, answered.
Can Aegis place or cancel orders?
No. Aegis requests read-only scopes from your broker and holds no execution rights.
Where is my data stored?
Credentials are encrypted client-side (AES-256) before anything leaves your device. Aggregated analytics never expose private keys.
What happens if I disconnect?
Access is revoked immediately. Reconnect anytime with a fresh OAuth handshake.