Security you can verify, not just trust
Aegis is wallet-first and non-custodial: you sign in with your wallet, Aegis never holds your funds, and any exchange key you connect is envelope-encrypted with a managed KMS. Every guarantee below maps to how the platform actually works.
Seven pillars, from your wallet to the ledger
Layered controls across identity, custody, key storage, data isolation, accounting, auditability and risk.
Wallet-first identity
Sign-In With Ethereum (SIWE, EIP-4361) across EVM chains and Solana. Link several wallets with CAIP-10, add passkeys (WebAuthn), and require a fresh wallet signature for sensitive actions. Recovery is a 2-step flow with a cooldown. No email, no password, no sign-up.
Non-custodial by design
An exchange API key with withdrawal permission is rejected — trade-only or nothing. On DEXs you sign every transaction yourself. Aegis never holds, moves, or signs for your funds.
KMS key encryption
Exchange API keys are envelope-encrypted with AWS KMS. The secret is never returned by the API once stored — it is used only to place the trades you authorize.
Tenant isolation + RLS
Multi-tenant data is separated at the database with PostgreSQL Row-Level Security, so isolation is enforced by the engine itself — defense in depth, not just application checks.
Double-entry ledger
Balances are never edited in place. An append-only, double-entry ledger records every movement, and balances are derived from immutable sums.
Immutable audit trail
Actions flow through a transactional outbox and an append-only audit log, so what happened stays reconstructable and tamper-evident.
Deterministic risk guardrails
Per-symbol and portfolio limits, atomic reservations and a kill switch back every strategy. Trading modes progress PAPER, then TESTNET, then REAL — so you prove a setup before real capital.
Your funds never touch Aegis
Non-custodial is not a marketing word here — it is enforced at connection time and at execution time.
- On a CEX, a key that can withdraw is rejected. Aegis accepts trade-only keys, so the platform can place orders but can never move money off the exchange.
- On a DEX, you sign every transaction from your own wallet. Aegis never holds a private key and never signs on your behalf.
- Stored exchange secrets are envelope-encrypted with KMS and never returned by the API — even to you — after they are saved.
- Automation ships disabled. Nothing trades until you explicitly opt in, and a kill switch can halt activity at any time.
What a connected key can and cannot do
- Read balances and place the orders you authorize
- Run strategies, backtests and risk checks against your account
- Withdraw, transfer, or move funds off-exchange — never
- Expose your secret through the API — never
Connect a wallet and stay in control
No password, no custody. Sign in with your wallet and keep your keys where they belong.
Visit the Platform