IDSWAP security

Security is not an add-on; it is the foundation of how IDSWAP is built. Here is a summary of the protection applied to the application and infrastructure.

Application protection All user input is sanitized and validated before use. Every request is protected, responses carry strict security headers, and requests are rate-limited to prevent abuse.

Data protection We minimize stored data and protect sensitive values with encryption. IP addresses are stored as keyed hashes that cannot be reversed without the secret key.

Transaction protection Swap transactions are built server-side from a quote stored against your session. The browser cannot request arbitrary transactions. Every transaction hash is verified on the network before it counts in statistics.

Integrity monitoring The admin dashboard includes a file integrity scanner that detects changes to application code, unknown files in public directories, and common webshell patterns. Administrators can create a baseline after legitimate updates.

What we never ask for We never ask for a seed phrase, private key, or wallet password. We do not ask you to send funds to a personal address.

User responsibility Use a secure device, verify the site address, and review every transaction in your wallet. The best security comes from strong systems combined with careful habits.