Security
Clear controls for connected trading.
Review account access, wallet permissions, and product activity. Understand what a configured signer can authorize before using live execution.
Account access
Use strong credentials and the authentication options available to your account. Astral limits protected product routes to authenticated sessions.
Wallet permissions
Where Astral Wallet is available, account-linked access and authorized signing follow its configured permissions. Review these before funding or enabling activity.
Visible activity
Orders, fills, alerts, and strategy state remain visible in the product so unexpected activity can be reviewed.
Wallet authorization
Astral Wallet is a managed Solana wallet linked to your Astral identity, where available. Live strategies may act under configured signing permissions. Signing out or exporting a wallet should not be treated as revoking those permissions.
Strategy responsibility
Backtests do not guarantee live outcomes. Review generated logic, sizing, order type, and protective conditions before allowing a strategy to trade from your wallet.
Session and device hygiene
Protect the email, device, and browser used for Astral. Sign out of shared devices and report unexpected account or trading activity promptly.
Incident communication
If a security event requires user action, Astral will use the account and product communication channels available at that time.
Responsible disclosure
Found a security issue?
Email security@astral.trading with clear reproduction steps and the affected surface. Do not access data that is not yours, disrupt service, or perform social engineering.
Please allow time to investigate before public disclosure. Astral does not currently represent this page as a certification, independent audit report, or bug-bounty promise.
Keep rules and access visible.
Start with research and testing. Review the wallet, strategy, allocation, and permissions before enabling an available live workflow.