Security

Security at Fortress.

We take security seriously. Fortress Finance is built with institutional-grade security practices to protect your data and financial information.

Our Security Practices

AES-256-GCM Encryption

All API keys and sensitive credentials are encrypted at rest using AES-256-GCM with unique keys per account.

Mandatory 2FA

Every Fortress account requires two-factor authentication via TOTP. No exceptions.

Read-Only Access

Exchange connections use read-only API permissions. Fortress can never move, trade, or withdraw your assets.

Account-Scoped Access

Every data query is scoped to the authenticated account, so users can only access their own data.

Audit Logging

All API actions are logged with user ID, action type, timestamp, and IP address for compliance.

Infrastructure Security

Hosted on Vercel with automatic HTTPS, DDoS protection, and edge network distribution.

Responsible Disclosure

We welcome security researchers to help us keep Fortress Finance safe. If you discover a security vulnerability, please report it responsibly.

01

Report the vulnerability

Email elijahhenry11@gmail.com (Fortress Finance support) with a detailed description, steps to reproduce, and impact assessment.

02

Wait for our response

We will acknowledge receipt within 48 hours and provide an estimated timeline for remediation.

03

Coordinated disclosure

Please do not disclose the vulnerability publicly until we have released a fix. We will credit you in our security advisory.

In Scope

  • Authentication and authorization bypasses
  • Data exposure or leakage vulnerabilities
  • Cross-site scripting (XSS), CSRF, and injection attacks
  • API security issues (broken access control, rate limiting bypass)
  • Encryption or cryptographic weaknesses

Out of Scope

  • Denial of service (DoS/DDoS) attacks
  • Social engineering or phishing
  • Issues in third-party services we integrate with
  • Vulnerabilities requiring physical access to a device

Security Contact

Contact: elijahhenry11@gmail.com (Fortress Finance support)

← Back to Home