Strict risk controls and security measures
This page details the security measures and risk controls that protect your account access, credentials, and live execution.
Algosetrade never holds your money. Orders route to your own SEBI-registered broker account through the broker's official API — the platform can place and exit trades, and cannot withdraw or transfer funds. Your capital and positions stay with your broker at all times.
Account access
Getting into an Algosetrade account
TOTP two-factor authentication
Login requires a time-based one-time password from your authenticator app — a leaked password alone is not enough.
Bot protection
Cloudflare Turnstile challenges automated login attempts before they reach the sign-in form.
Hardened sessions
Session tokens are scoped and managed server-side; stale or suspicious sessions are invalidated.
Credentials & data
What Algosetrade stores, and how
API keys encrypted at rest
Broker credentials are encrypted the moment they are saved and are never exposed in the browser.
Encrypted transport
Every connection — browser to Algosetrade, Algosetrade to broker — runs over encrypted channels.
No third-party sharing
Credentials exist for one purpose: routing your orders to your broker. They are not shared or resold.
Live execution
While a strategy is running with real capital
Per-leg and trailing stop-loss
Every leg carries its own exit rules, evaluated tick by tick, independent of the rest of the book.
Portfolio MTM loss lock
A hard daily loss limit. Breach it and every position is squared off and the strategy halts — automatically.
Max-profit auto square-off
Profit targets close the book on your terms instead of letting a good day round-trip.
One-click kill switch
Exit all positions and stop all automation instantly, from any device.
Questions about a specific control?
The FAQ covers funds custody, broker APIs, and what stops a runaway strategy — or ask us directly.