Developers
Security model
Stridge moves money; it does not hold it. Every deposit is routed straight to the destination you configured — no Stridge-operated balance accounts, no standing pool of customer funds. Here is how that holds up end to end.
Stridge security checks, all passed: project key valid, caller IP allowlisted, webhooks signed with HMAC-SHA256, and funds never pooled.Security checksAll passedProject key validserver-side onlyCaller IP allowlisted203.0.113.0/24Webhook signedHMAC-SHA256Funds never poolednon-custodial
Explore
Non-custodialWhy Stridge routes funds straight to your destination and never keeps a balance.
IP allowlistRestrict every Stridge API to a fixed set of IP addresses you registered.
Gateway Kit securityThe browser-safe gateway key and the three controls that bound what it can do.
Key managementHow the Routing Engine's signing keys are split, guarded, and policy-checked.
Was this page helpful?