Scanner LIVE Guard EARLY DEV
14:32:01 [SCAN] Hardcoded Alpaca API key detected in strategy.py
14:32:03 [BLOCKED] Live endpoint rejected - paper mode required
14:32:05 [SECURE] Position size within configured limit
14:32:08 [SCAN] Market order missing risk guard in bot.py:34
14:32:11 [BLOCKED] Order rejected - exceeded max allocation (20%)
14:32:14 [SCAN] Binance secret exposed in config.json
14:32:17 [SECURE] All credentials resolved to environment variables
14:32:19 [BLOCKED] Unbounded quantity rejected - missing position cap
14:32:22 [SCAN] 0 findings across 12 files - clean
14:32:25 [SECURE] Drawdown limit enforced at 5% threshold
14:32:28 [GUARD] AWS key blocked in outbound POST to webhook.site
14:32:31 [GUARD] HTTPS egress scan - 0 secrets detected - ALLOW
14:32:01 [SCAN] Hardcoded Alpaca API key detected in strategy.py
14:32:03 [BLOCKED] Live endpoint rejected - paper mode required
14:32:05 [SECURE] Position size within configured limit
14:32:08 [SCAN] Market order missing risk guard in bot.py:34
14:32:11 [BLOCKED] Order rejected - exceeded max allocation (20%)
14:32:14 [SCAN] Binance secret exposed in config.json
14:32:17 [SECURE] All credentials resolved to environment variables
14:32:19 [BLOCKED] Unbounded quantity rejected - missing position cap
14:32:22 [SCAN] 0 findings across 12 files - clean
14:32:25 [SECURE] Drawdown limit enforced at 5% threshold
14:32:28 [GUARD] AWS key blocked in outbound POST to webhook.site
14:32:31 [GUARD] HTTPS egress scan - 0 secrets detected - ALLOW
Home Scanner Guard Roadmap About Get Early Access
quanttape scan my_bot.py
  +-----+
  | Q Q |  QUANTTAPE  v0.0.22
  |  T  |  The Last Line Before The Market.
  +-+-+-+
                       ── FINDINGS ──

 SEV            RULE                       FILE             PREVIEW
 ───────────────────────────────────────────────────────────────────────────────
 ◆  MEDIUM      High Entropy String        demo_bot.py:12   gT4xKpRv************************
 ◆  CRITICAL    AWS Secret Access Key      demo_bot.py:15   wJalrXUt************************
 ◆  MEDIUM      High Entropy String        demo_bot.py:15   wJalrXUt************************
 ◆  HIGH        Telegram Bot Token         demo_bot.py:18   12345678************************
 ◆  MEDIUM      Generic Password           demo_bot.py:21   TradingD**************
 ◆  MEDIUM      Generic API Key            demo_bot.py:24   sk_live_******************
 ◆  MEDIUM      High Entropy String        demo_bot.py:24   sk_live_******************
 ◆  LOW         Infinite Loop Risk         demo_bot.py:28   while Tr***
 ◆  LOW         Sleep Without Kill Switch  demo_bot.py:30   time.sle******
 ◆  LOW         Hardcoded Ticker Symbol    demo_bot.py:33   symbol =*******

 10 findings  ·  1 critical  1 high  5 medium  3 low
 * previews are partially redacted for safety
 +-----+
 | Q Q | QUANTTAPE v0.0.22
 |  T  | The Last Line Before The Market.
 +-+-+-+
              ── FINDINGS ──

 SEV         RULE                    FILE
 ──────────────────────────────────────────────
 ◆ MEDIUM    High Entropy String     demo_bot.py:12
 ◆ CRITICAL  AWS Secret Access Key   demo_bot.py:15
 ◆ MEDIUM    High Entropy String     demo_bot.py:15
 ◆ HIGH      Telegram Bot Token      demo_bot.py:18
 ◆ MEDIUM    Generic Password        demo_bot.py:21
 ◆ MEDIUM    Generic API Key         demo_bot.py:24
 ◆ MEDIUM    High Entropy String     demo_bot.py:24
 ◆ LOW       Infinite Loop Risk      demo_bot.py:28
 ◆ LOW       Sleep W/O Kill Switch   demo_bot.py:30
 ◆ LOW       Hardcoded Ticker        demo_bot.py:33

 10 findings · 1 critical 1 high 5 medium 3 low

The Last Line Before
The Market.

Security infrastructure for algorithmic trading.
Scan your code for leaked credentials. Block secrets from leaving at runtime. Two tools, one mission.

🔍Scanner 🛡Guard
Available on PyPI
$ pip install quanttape
PyPI GitHub
Explore
LIVE

Scanner

Scan your codebase for leaked broker keys, risky trading patterns, and exposed credentials. 45+ rules tuned for algo trading and AI agents.

Try the Scanner →
LIVE

Guard

Runtime proxy that monitors outbound HTTP/HTTPS from your trading bots and blocks leaked credentials before they hit the wire.

Learn More →
// why_quanttape

Generic Secret Scanners
Weren't Built for Trading.

Standard security tools detect leaked passwords and cloud keys. They don't understand broker SDKs, trading logic, or what keeps live capital safe.

Generic Secret Scanners
QuantTape
Generic credential patterns
AWS keys, GitHub tokens, cloud secrets
Broker-specific detection
Alpaca, Binance, IB, Coinbase, Kraken key formats
No trading logic analysis
Can't detect missing stop-losses or position limits
Trading-code aware rules
Position sizing patterns, market-order risk, shutdown loops, broker-specific credentials
Noisy on trading bots
Flags while True, submit_order(), and type="market" as issues
AST-aware suppression
Understands close/flatten flows, shutdown loops, wrapper methods, and aggregate symbols
Designed for web/cloud apps
Optimized for CI/CD pipelines and cloud infrastructure
Designed for algo trading
Built for Python strategies, broker SDKs, and live execution environments
Secret detection only
Finds leaked keys, nothing else
Code safety analysis
Asks "is this code safe to trade with?" not just "did you leak a secret?"

QuantTape is not affiliated with any third-party security tool. This comparison reflects general categories of secret scanning software, not any specific product.

// trust_architecture

Your Code Never Leaves
Your Machine.

QuantTape runs locally inside your environment. Strategy code, credentials, and trading logic remain under your control. No data is sent to us.

Protected By
QuantTape Engine
◆ AES-256 Encryption
◆ 100% Local Processing
◆ Zero-Knowledge Design
◆ No Data Sent to Us
New in v0.0.22

Guard - Egress Firewall for AI Agents

The Scanner catches secrets in your codebase. Guard blocks them from leaking at runtime. Guard is still in early development - please report any issues to info@quanttape.com. Sign up for the full preview.

See Guard Preview

Get Early Access

Scanner updates, broker support, and runtime guardrail previews. No spam.

~$