Built to keep your edge yours.

Forven is a local-first research tool. The design goal is simple: the things that make your research valuable — your strategies, your data, and your keys — should stay under your control.

Local by default

Strategies, market data, and gauntlet runs live on your own machine. They are not uploaded to Forven and are not required to leave your device for the core lab, daemon, and backtesting to work.

Your keys never leave your machine

Exchange API keys and LLM (model) API keys are bring-your-own. Forven stores them locally on your machine and uses them to talk directly to those providers. Forven does not transmit, proxy, or store your trading or model keys on any server.

No account, nothing to breach

Forven is self-hosted and open source. There is no Forven account, login, or device-linking for the app — you clone the source and run it locally, so there is no central store of user credentials or data for an attacker to target. This website is informational and does not require you to sign in.

Run the source you trust

Forven is not distributed as a packaged .exe or installer, so there is no unsigned binary to vet. You get the code from the official source repository and run it with the launcher scripts. Review the source, pin a commit you trust, and audit any changes before you update. See Install for the exact steps.

Transport and hardening

This website is served over HTTPS with HSTS, and we set standard hardening headers (no framing, no MIME sniffing, a strict referrer policy). We do not use advertising or third-party tracking cookies.

Reporting a vulnerability

Found a security issue? We want to hear about it. Email security@forven.app with details and steps to reproduce. Please give us a reasonable chance to fix it before public disclosure. We do not currently run a paid bounty, but we credit reporters who want it.