TradeSurge

Security

Your keys can trade. They can't withdraw.

Checked, sealed, stored, and opened only to place your orders.

Report a security issueRead the terms
  • Keys with withdraw or transfer rights are rejected
  • Encryption bound to your account and record
  • No page or API returns a secret
  • Revoking erases the encrypted secret

Your account and orders

Password again before anything live.

Safe by default, and never in the way of an exit.

  • Email verified; codes for new browsers
  • Rate limits on sign-in and key changes
  • Sessions in http-only cookies, stored as hashes
  • Your security log: keys, copies, sign-ins
  • Staff never see keys or password hashes
  • Retried orders can't double: ids are deterministic

AI and your data

Surge Copilot reads. It doesn't trade.

Built on Claude, by Anthropic. Many answers never reach a model.

  • Built-in skills answer from your data first
  • Same masked key hint you see
  • No trade advice, only facts and rule checks
  • Anthropic's commercial terms: no training on API inputs

Infrastructure

Where it runs and how we check it.

Production in Singapore, behind Cloudflare, HTTPS everywhere.

  • Tests audit every API route for access
  • Committed-secret and dependency scans on every change
  • Designed toward ISO/IEC 27001 and PCI DSS
  • Not certified today, and we won't claim it

FAQ

Security questions

Keep reading

Every funded account. One cockpit. Take command.

Start with one accountCount your stops

7-day free trial on every plan. Cancel anytime.