Private by design

Your data never leaves your machine.

No account, no login, no cloud of ours. Everything lives in a local file, and with a passphrase set, that file is genuinely encrypted, not just hidden behind a screen. If you choose to sync it to a second machine, only that encrypted file moves, and only through storage you already own.

  • AES-256-GCM encryption at restA scrypt-derived key makes your file unreadable ciphertext without the passphrase. There is no backdoor, and no recovery if you forget it.
  • Works fully offlineLast-known prices are cached and painted instantly on launch: your whole position is there with no network at all.
  • Optional sync, still no server of oursWant it on a second computer? Point it at a folder you already sync (Dropbox, OneDrive, a shared drive) and only the encrypted blob is written there. Your holdings are never readable on the shared drive, and nothing routes through us. Newest edit wins, and the older one is always backed up.
  • Portable backups & local PDF reportsExport a plaintext backup or a designed one-page report, generated on your machine with no service involved.
  • Licensing you can auditStandalone licences are Ed25519-signed and verified entirely on your machine, no activation server, no phone-home. Pro's daily licence check sends only your Pro key, a random installation ID and the app version, and gets back a signed confirmation the app verifies itself; your financial data is never part of it. Either way the app ships only public keys, so it can verify a licence but never mint one.
  • Hardened buildPackaged builds run with Electron's security fuses applied and asar integrity validation on: a modified archive refuses to launch.
Responsible disclosure

Found a security issue? Tell us first.

If you believe you have found a vulnerability in Manticore Finance, the app or this website, please email [email protected] with “Security” in the subject line, before disclosing it publicly.

  • What to includeThe app version (Settings shows it), what you did, what happened, and how to reproduce it. A proof of concept helps, but please don't access other people's data or disrupt the service to get one.
  • What happens nextWe confirm receipt within 5 business days, keep you updated while we investigate, and let you know when a fix ships. We'll credit you in the release notes if you'd like.
  • How fixes reach youSecurity fixes ship as a new version of the app. The app tells you when one is available, and you install it by downloading the latest installer; your data and licence carry over.
  • What's inside the appManticore Finance is built on Electron and open-source components. We keep a software bill of materials for every release so we can check new advisories against what we ship. The full list of components and their licences is on the third-party software page.