Your money is protected at every layer.
EDGE never holds your funds or securities. Every dollar flows through Alpaca Securities LLC — a FINRA-registered, SIPC-protected US broker-dealer. Here is exactly how we protect you.
How your money moves
EDGE is a routing layer only. Your funds never pass through our company.
EDGE never holds customer funds or securities at any point in this flow.
8 layers of protection
From your login to your trade execution, every step is secured.
Alpaca Markets — SIPC Protected
- All funds and securities held by Alpaca Securities LLC, a FINRA-registered broker-dealer
- SIPC protection up to $500,000 per account (including $250,000 for cash claims)
- EDGE never touches your money — we only route orders
- Every trade confirmed and settled by Alpaca on regulated US exchanges (NYSE, NASDAQ, AMEX)
JWT Authentication & API Security
- Every API request requires a signed JWT token — no token, no access
- Tokens expire automatically and are rotated on every session
- All endpoints protected by server-side authentication middleware
- Zero client-side storage of sensitive credentials
Cloudflare — DDoS & WAF Protection
- All traffic passes through Cloudflare's global network before reaching our servers
- Web Application Firewall (WAF) blocks SQL injection, XSS, and CSRF attacks
- DDoS protection up to the network layer — attacks mitigated before they reach EDGE
- SSL/TLS encryption enforced on all connections — no plain-text traffic ever
Encryption — Data at Rest & In Transit
- AES-256 encryption for all sensitive data stored in our database
- TLS 1.3 enforced for all data in transit — industry gold standard
- Passwords hashed using bcrypt with cost factor 12 — never stored in plain text
- SSN and personal identity data encrypted before storage
Wordfence-Grade Brute Force Protection
- Rate limiting on all authentication endpoints — failed login attempts are throttled
- IP-based blocking after repeated failed attempts
- Automated monitoring for suspicious login patterns
- Account lockout protection to prevent credential stuffing attacks
Infrastructure Security
- Servers run on hardened Ubuntu 24.04 LTS with automatic security updates
- SSH key-only access — password login disabled on all production servers
- Firewall rules restrict all inbound traffic except HTTPS (443) and SSH
- PM2 process management with automatic restarts and uptime monitoring
KYC / AML Compliance
- Every account undergoes full identity verification (KYC) before trading is enabled
- Sanctions screening and Politically Exposed Person (PEP) checks on signup
- Ongoing transaction monitoring for suspicious activity
- Compliant with US Bank Secrecy Act and FINRA AML requirements
Audit Logs & Monitoring
- Full audit trail of every trade, login, and account change
- Real-time server monitoring with instant alerts on anomalies
- All API calls logged with timestamps, IP addresses, and user IDs
- Stripe handles all payment processing — PCI-DSS compliant by default
SIPC Protection — Up to $500,000
Your brokerage account is held at Alpaca Securities LLC, a member of SIPC. If Alpaca were ever to fail, SIPC protects your account up to $500,000 in securities and cash (including up to $250,000 in cash). This is the same protection that covers accounts at major US brokerages like Fidelity, Schwab, and TD Ameritrade.
Penny stock disclosures
- In-app risk disclosure before your first penny stock trade, consistent with Exchange Act Rule 15g-2
- Bid/ask spread and liquidity disclosures on order tickets for thinly-traded names
- The broker-dealer of record (Alpaca) is disclosed on every account and trade confirmation
- EDGE Discovery Scores are informational only and do not constitute investment advice
Risk disclosures
This page is for informational purposes only and does not constitute investment, legal, or tax advice. Nothing here should be construed as an offer to sell or a solicitation to buy any security. EDGE intends to operate through a registered broker-dealer of record and will be subject to applicable securities laws and FINRA rules.
Micro-cap securities are inherently volatile and illiquid. Losses can be significant and rapid, and may include the total loss of your investment.
Discovery signals are probabilistic and can produce false positives, particularly during manipulated or thinly-traded conditions. The Discovery Score is not investment advice.