Issue № 07Fintech

Ilakku

A self-hosted intraday trading cockpit built around one guarantee: your broker keys never leave your machine.

At a glance: Ethereal built and runs Ilakku, its own app for active day traders. The key idea: it runs on your own computer, so your broker login never leaves your machine, unlike typical tools that keep it on someone else's server. It's proven on live trading and checked by 223 automated tests.

Ilakku — cover artwork07
Client
Ethereal — own product
Industry
FintechTrading SaaS · Self-hosted systems
Year
2025
Services
Product EngineeringHybrid-SaaS ArchitectureLicensingSecure Deployment
223automated tests passing
2,763NSE symbols screened
0broker keys on our servers
01

The Problem

Disciplined intraday traders lack a secure execution cockpit. Typical SaaS trading tools force users to hand highly sensitive broker API keys to a third-party server — a massive security and liability risk.

Custody

Typical SaaS trading tools require handing your broker API keys to a third party.

Discipline

Disciplined intraday traders lack a rule-enforcing execution cockpit that removes emotion from the entry.

Control

Renting someone else's server means renting someone else's access to your capital.

02

The Solution

We engineered a hybrid SaaS: a hosted licensing control plane paired with a fully self-hosted trading engine, so broker keys never leave the user's machine. Credentials are Fernet-encrypted locally, auth uses headless TOTP, and the engine ships two strategies (ORB Retracement, R-Factor Pullback), an NSE screener across ~2,763 symbols, one-command Docker install, daily backups, and a real-time dark dashboard.

System architecture
L1Plane

License Control Plane

A hosted plane issues and verifies licenses — the only surface Ethereal ever touches.

L2Data

NSE Screener

A ~2,763-symbol NSE screener ranks the universe and feeds the day's watchlist.

L3Logic

Strategy Engine

Two coded strategies — ORB Retracement and R-Factor Pullback — drive every automated decision.

L4Core

Self-Hosted Engine

The trading engine runs on the user's own machine; Fernet-encrypted broker keys never leave it.

Trade lifecycle
Screen~2,763 NSE symbols
AuthHeadless TOTP
SignalORB / R-Factor
ExecuteZerodha Kite
Latency budget
223

automated tests passing

Verified live

A 49-symbol live universe runs against real broker tokens.

Recoverable

Daily encrypted backups keep every install restorable.

Security guarantees
Key Isolation

Broker API keys never leave the user's machine — full stop.

Encrypted at Rest

Every stored credential is sealed with Fernet encryption.

Headless Auth

Broker sessions authenticate via headless TOTP with no manual OTP handoff.

One-Command Install

A single Docker command stands up the whole self-hosted stack.

Daily Backups

The database backs up automatically every night.

Real-Time Cockpit

A dark, info-dense dashboard streams positions and signals live.

03

The Outcome

Broker-key isolation as a core security guarantee — verified with 223 automated tests passing and a 49-symbol live universe running against live broker tokens.

Built with

06 technologies
01FastAPISelf-hosted trading engine API
02React 18 + ViteReal-time dark dashboard
03Zerodha KiteBroker execution
04FernetCredential encryption at rest
05SQLAlchemySQLite / Postgres persistence
06DockerOne-command self-hosted install
Next issue — yours?

Have an fintech problem like this?

Tell us what you're building — we'll tell you exactly how we'd ship it.

Keep reading

From the archive

All 15 case studies →