Trust is the product.
AlphaSquare is engineered to institutional security standards. This is how we protect your assets, your data and your account — end to end.
Infrastructure
Hardened, segregated cloud infrastructure with least-privilege access, network isolation and 24/7 monitoring.
Encryption
TLS 1.3 in transit and AES-256 at rest. Secrets are managed in a dedicated key-management service.
Data Protection
Immutable double-entry ledger, encrypted backups, and strict data-retention and privacy controls.
Authentication
Strong authentication, session controls, device awareness and role-based access across the platform.
Penetration Testing
Regular independent penetration tests and continuous automated vulnerability scanning.
Bug Bounty
A responsible-disclosure program rewards researchers who help us find and fix issues.
Incident Response
A documented incident-response plan with defined severities, on-call rotation and post-mortems.
Cold Storage
The majority of digital assets are held in offline cold storage with multi-signature controls.
Compliance
AML, KYC and sanctions screening aligned to global regulatory standards.
Authentication
- Two-factor authentication (TOTP & device-based)
- Passkey / biometric login on supported devices
- Session expiry, revocation and active-device management
- Role-based access control and least privilege
- Withdrawal address allow-listing and confirmations
- Anomaly detection on sign-in and transactions
Cold Storage & Custody
- Majority of assets held offline in cold storage
- Multi-signature approval for all movements
- Geographically distributed key custody
- Segregated client assets — never commingled
Incident Response
Detect
Continuous monitoring and alerting surface anomalies in real time.
Contain
On-call responders isolate affected systems to limit impact.
Eradicate
Root cause is removed and controls are strengthened.
Recover
Services are restored from verified, encrypted backups.
Review
A blameless post-mortem drives permanent improvements.
Penetration Testing
We engage independent security firms to test our systems on a recurring basis, and we run continuous automated scanning between engagements. Findings are triaged by severity and tracked to remediation with verification.
Continuous Monitoring
24/7 anomaly detection watches sign-ins, transactions and infrastructure. Alerts route to an on-call rotation with defined response-time objectives, and every event is recorded in a tamper-evident audit trail.
Security Certifications
SOC 2 Type II
Controls for security, availability and confidentiality.
ISO/IEC 27001
Information security management system.
PCI DSS
Payment card data handling standards.
GDPR & Privacy
Data protection and user privacy rights.
Security Updates
Biometric passkeys now available on supported devices for phishing-resistant sign-in.
Independent test completed with no critical findings; all items remediated.
Added new surfaces and increased reward tiers for high-severity reports.
Encryption keys now rotate on an automated schedule with full audit logging.
Bug Bounty & Disclosure
We welcome responsible disclosure. Report security issues privately and our team will respond quickly. Valid, high-impact reports are eligible for rewards.
[email protected]Protect yourself
- We will never ask for your password, seed phrase, or private keys.
- Always verify you're on the official AlphaSquare domain before signing in.
- Enable two-factor authentication and review your active devices regularly.
- Double-check wallet addresses and networks before sending funds.