Security You Can Trust

Built for traders who demand safety, privacy, and complete control of their funds.

Non-Custodial by Design

Algonney never touches your funds. All assets stay safely on your exchange account. We only execute trades through your API permissions.

Withdrawals: Always Blocked

Encrypted API Keys

Your API keys are encrypted using industry-standard AES-256 encryption and stored securely. They are never exposed, shared, or stored outside our protected environment.

  • Only "Read" + "Trade" permissions
  • Withdrawal access permanently disabled
  • Keys are never visible to staff

IP Whitelisting Support

For maximum protection, you can whitelist Algonney's server IPs in your exchange settings, ensuring your keys only work from our secure infrastructure.

52.14.x.x
34.201.x.x
18.234.x.x

Recommended for advanced users.

2FA Enforcement & Login Protection

Two-factor authentication is required for exchange connections and other high-risk account actions. Login attempts are rate-limited per IP and per account to prevent brute-force attacks.

  • 2FA required before connecting, updating, or deleting exchange API keys
  • Login attempts limited per IP and per account
  • Repeated failed attempts trigger additional verification and temporary lockout

Real-Time Protection

Our systems automatically monitor trading activity for unusual patterns, API misuse, and unauthorized access attempts.

  • Suspicious login detection
  • API anomaly alerts
  • Device and location checks

Encryption & Infrastructure

Your data travels through secure TLS 1.3 connections and stays encrypted at rest. Our infrastructure is protected by advanced firewalls, DDoS mitigation, and continuous monitoring.

  • TLS 1.3 secure transport
  • AES-256 encryption
  • Cloudflare protection

Privacy & Control

You own your data. Export or delete your account at any time. We do not sell, share, or monetize your information.

GDPR compliant · No data reselling · Transparent privacy controls

Responsible Security Program

Found a vulnerability? Our security team is ready to respond.

[email protected]

We support responsible disclosure. Read our full disclosure policy for scope, rules, and safe harbor details.