Algo security measures in cTrader

cTrader provides a secure environment for algorithm developers to create, distribute and run their work without compromising intellectual property. At every stage, from local development to distribution in cTrader Store and execution, your source code is always protected.

This article explains the protection measures built into the cTrader ecosystem.

Why the .algo file is secure

When you build an algorithm in cTrader Windows or Mac, using either C# or Python, your code is compiled into a proprietary .algo file. This file is central to intellectual property protection and differs fundamentally from traditional DLLs:

In-memory execution. The file never runs from disk in a readable form, preventing file-based extraction.
No intermediate CIL code. Unlike standard .NET assemblies, .algo files do not contain CIL bytecode, which decompilers rely on.
Optional obfuscation. You can enable obfuscation during build to make structural code analysis even harder.
Anti-decompilation design. The .algo format is built to resist reverse engineering through conventional tools.

The sealed .algo file prevents unauthorised access and distribution, and this file serves as the foundation for secure interactions with your algorithm across the cTrader ecosystem and beyond.

Creation

All compilation takes place on your own computer using cTrader Windows or Mac. The .algo file is generated locally, and no source code is uploaded to cTrader or any third-party server.

Even with cloud synchronisation enabled, your original source files are never transferred. Only the compiled .algo is eligible for synchronisation or sharing, and even that remains encrypted and bound to your ownership.

Export

After building, you can export your algorithm from cTrader with source code or without it. Exporting with source code can be useful for collaboration or sharing with trusted parties, while exporting without source code is the safest option when distributing to a wider audience.

When exporting without source code, you can restrict run-only permission to a specific user or grant global run-only rights:

Access specific to user – only the specified cTrader user can execute the algorithm.
Access for any user – any cTrader user can execute the algorithm.

Distribution

When you publish your algorithm in cTrader Store:

The .algo file is encrypted during upload.

Note

Even if you upload an exported file containing source code, only the protected .algo version is published, and the source code is automatically removed. Algorithms added to Store directly from Cloud never include source code.
For every purchase, cTrader Store generates a unique protected copy, bound to the buyer’s cTrader ID.
Files cannot be transferred between cTrader users, preventing unauthorised sharing.

Your commercial rights are respected, as each purchase is single-user and non-transferable.

Execution

Once purchased and installed by other users in cTrader Store, .algo files can be executed in two environments: locally on a device or in Cloud. Both modes preserve the integrity of your intellectual property.

Local execution

The file runs entirely within cTrader Windows or Mac, not exposed to the user or their disk.
Licence checks validate the user’s access rights at runtime.
The algorithm logic remains encrypted and inaccessible, even while in use.

Cloud execution

The algorithm runs in a sandboxed, isolated cloud environment provided by cTrader.
The user and broker only see the outputs, such as trades or indicator values, but never the algorithm internals.
The .algo file itself is not accessible, downloadable or viewable by anyone.

Summary

Action	Description	Protection
Create	You write code locally and develop your algorithm.	No source code leaves your device. The `.algo` file is generated securely.
Build	The `.algo` file is always compiled into a sealed unit and can be obfuscated.	The file is resistant to decompilation and file inspection.
Export	You export the compiled `.algo` file without code (recommended) or with code.	The `.algo` file without source code enforces run-only access either for a specific user or globally.
Distribute	The `.algo` file is uploaded to cTrader Store.	Source code is always removed in the published version.
Access	Encrypted, personal copy is provided for each buyer.	The file cannot be used by any other user.
Run (locally)	User executes within cTrader platform.	The algorithm code is protected even in memory; licensing is enforced.
Run (in Cloud)	Algorithm runs in an isolated server-side instance.	No access to file; only algorithm outputs are exposed.

These measures ensure that your algorithm intellectual property remains protected, from the moment you create the algo to every instance it is ever run.