Security
Your accounts, handled with care.
RevenShield sits next to your trading accounts, so we design for the least access possible and protect everything we hold.
Read-only platform access
- cTrader connects through its official authorisation page; we never see your cTrader password.
- Match-Trader: your platform password is used once to sign in and never stored; only the encrypted sign-in is kept.
- We request view access only, never permission to trade.
- Disconnecting deletes the stored access straight away.
Secrets stored safely
- Account passwords are kept only as salted one-way hashes.
- Sign-in sessions and device keys are stored as one-way hashes.
- Platform access tokens are encrypted, with the key kept outside the database.
The server decides
- Cooldowns are started and timed by our server, not by your device's clock.
- Every request is checked against the signed-in account; one user can never read another's data.
- A device key can only fetch and report protection status. It cannot start, change or end a cooldown.
Never locked longer than chosen
- Each cooldown has a fixed end time from the moment it starts.
- Protected devices lift the pause at that time by themselves, even offline.
- A cooldown that has ended can never become active again.
Minimal data
- No advertising, analytics or tracking cookies.
- The extension does not send your browsing history.
- Logs are written so they never contain passwords, tokens or keys.
Abuse protection
- Sign-in, sign-up and connection attempts are rate limited.
- Important actions (rule changes, device removals, cooldowns) are recorded in an audit trail that cannot be edited.
Report a vulnerability
If you believe you have found a security problem, please email support@revenshield.com with the steps to reproduce it. Please do not access other people’s data, disrupt the Service or share the problem publicly before we have fixed it. We will reply and keep you updated.
Honest limits
Protection runs in the browsers and devices you choose to protect. A browser extension can be removed or switched off, and your broker is not contacted, so orders can still be placed elsewhere. The optional Windows Lockdown mode makes switching protection off much harder, not impossible.