¶ TradeGrub Security
TradeGrub's enterprise-grade platform, which powers many brokerage client applications through white-labeled solutions, is now available directly to consumers. This platform offers the same robust security and reliability trusted by financial institutions globally.
¶ ISO 27001 Certification
TradeGrub holds an active ISO 27001 certification, the international standard for information security management. This certification is a key requirement for brokerage firms that demand enterprise-level security, further validating TradeGrub’s commitment to protecting client data and ensuring a secure trading environment.
In addition to ISO 27001, TradeGrub undergoes annual assessments against all five trust services criteria: Security, Confidentiality, Availability, Integrity, and Privacy. This ensures continuous alignment with industry standards and regulatory expectations.
Achieving the ISO 27001 certification and being independently verified assures that TradeGrub has an effective security program in place. This commitment strengthens the reliability of its infrastructure, delivering a secure, trustworthy trading experience for all customers. TradeGrub’s platform is backed by the same enterprise-grade infrastructure that supports some of the world's leading brokerages.
¶ Platform Security Audit
TradeGrub secures all its internal interfaces, ensuring that every component of the system is protected by industry-leading security measures. Cloud servers located in various regions are fortified by enterprise-grade firewalls and proxies, offering end-to-end protection against external threats. Regular security audits are performed by whitehat hackers who use industry-reputed, state-of-the-art tools and manual testing methodologies. These experts hold top industry certifications, such as:
- Offensive Security Web Expert (OSWE)
- Offensive Security Certified Professional (OSCP)
- Certified Ethical Hacker (CEH)
- Various other cyber security certifications
This combination of advanced tools and highly skilled professionals ensures TradeGrub's platform remains secure against emerging threats.
¶ Two-Factor Authentication (TOTP-Based 2FA)
TradeGrub supports Time-based One-Time Passwords (TOTP) through popular authenticator apps such as Google Authenticator, Microsoft Authenticator, and Authy.
- This ensures that even if your credentials are compromised, access to your account remains secure through a secondary layer of authentication.
- A TOTP QR code is provided during account setup for easy integration with your preferred authenticator app.
This feature is available for all account types to enhance security across the platform.
¶ Crypto Account Security
TradeGrub offers additional layers of security for crypto trading by ensuring that all sensitive account information is encrypted at every step. Below are key features designed to protect your crypto accounts:
¶ QR Code for API Key Setup
To simplify the input of API credentials, TradeGrub offers a QR code generator that encodes the following information:
- API Key
- API Secret
- Passphrase (if required)
- Sandbox Mode (optional)
Simply visit tradegrub.com/QR to generate your secure QR code. You can scan this QR code using the TradeGrub mobile app, allowing your credentials to be securely input without manual entry errors.
¶ QR Code Scanning on Mobile Devices
Using TradeGrub's mobile app, you can scan the QR code to fill in your API credentials automatically.
- The scanned information is immediately encrypted on the device before being transmitted or stored.
- Only encrypted tokens—generated from the API keys, passphrase, and sandbox mode—are saved, ensuring that sensitive keys are never exposed in plaintext.
If the QR code is not generated by TradeGrub, the scanner will notify you with a red warning box to ensure you don't input untrusted credentials.
¶ Data Encryption and Tokenization
When account keys (such as API key, secret, passphrase, and sandbox mode) are entered or scanned:
- They are encrypted immediately on your device using strong encryption algorithms.
- Only an encrypted token—generated from the keys—is transmitted to the cloud and further encrypted both in transit and at rest.
- This ensures that TradeGrub never stores or handles unencrypted keys, protecting your data from unauthorized access at all times.
¶ Leadership and Expertise
TradeGrub's engineering team is led by an industry veteran with over 25 years of experience, including 18 years at one of the world’s top networking and security Fortune 100 companies. With extensive expertise in solution architecting and designing, deploying networks for some of the world's largest and most recognized brands, TradeGrub's leadership ensures that the platform operates at the highest levels of security and performance, leveraging top-tier security and networking hardware and software.
¶ Summary
This comprehensive security approach ensures that TradeGrub offers one of the most secure trading environments available, combining enterprise-grade infrastructure, 2FA/TOTP authentication, and secure credential handling through QR code technology.
At Tradegrub, security is a top priority. The trading platform implements robust security protocols to safeguard user data and assets. API keys are securely encrypted and stored without requiring withdrawal permissions, reducing potential risks. Furthermore, Tradegrub regularly updates its systems to counter emerging security threats, providing a secure and reliable solution for cryptocurrency trading.