Suspicious Activity Monitoring

Real-Time Monitoring

Ascentia continuously monitors your account for suspicious activity using advanced security systems:

• Login Attempts: Tracking failed login attempts and unusual login patterns
• Location Analysis: Detecting logins from unexpected geographic locations
• Device Fingerprinting: Identifying new or unrecognized devices
• Behavioral Analysis: Monitoring for unusual account activity patterns
• API Access: Tracking third-party integration usage and anomalies

Machine Learning Detection

Our AI-powered security system learns your normal usage patterns and can detect:

• Unusual login times or frequencies
• Abnormal data access patterns
• Suspicious changes to account settings
• Potential account takeover attempts
• Automated bot activity

Automatic Notifications

You'll receive immediate alerts for these security events:

• New Device Login: When your account is accessed from an unrecognized device
• Password Change: Confirmation when your password is updated
• Failed Login Attempts: After multiple unsuccessful login attempts
• Location Change: Login from a new country or unusual location
• API Key Changes: When integration credentials are modified
• Account Settings Changes: Updates to email, 2FA, or security settings

Notification Channels

Security alerts are sent through multiple channels:

• Email to your registered address
• In-app notifications in your dashboard
• SMS for critical security events (if enabled)
• Push notifications on mobile devices (when available)

Customizing Alerts

You can customize which security alerts you receive:

1. Go to Settings → Security → Notifications
2. Choose which events trigger alerts
3. Select your preferred notification channels
4. Set alert frequency preferences

If You Recognize the Activity

If the alert is for activity you performed:

1. Click "This was me" in the alert email or notification
2. The device or location will be added to your trusted list
3. Future logins from this device won't trigger alerts

If You Don't Recognize the Activity

If you receive an alert for activity you didn't perform, take immediate action:

1. Secure Your Account: Click "This wasn't me" in the alert
2. Change Password: Immediately update your password
3. Enable 2FA: If not already active, enable two-factor authentication
4. Review Sessions: Check active sessions and log out suspicious ones
5. Check Integrations: Review connected trading platforms and revoke suspicious access
6. Contact Support: Report the incident to our security team

Account Lockdown

If we detect severe suspicious activity, we may temporarily lock your account to prevent unauthorized access. You'll receive instructions via email on how to verify your identity and regain access.

Viewing Active Sessions

1. Go to Settings → Security → Active Sessions
2. See all devices currently logged into your account
3. View location, device type, and last activity time
4. Identify any unfamiliar sessions

Ending Sessions

You can remotely log out of any device:

• Click "End Session" next to any active session
• Use "Log Out All Other Sessions" to end all sessions except your current one
• Ended sessions will need to log in again with credentials

Session Timeout

For security, sessions automatically expire after:

• 30 days of inactivity on desktop browsers
• 90 days on mobile devices with "Remember Me" enabled
• Immediately when you explicitly log out

Accessing Your Audit Log

1. Navigate to Settings → Security → Audit Log
2. View a chronological list of security events
3. Filter by event type, date range, or device
4. Export logs for your records if needed

What's Logged

Your audit log includes:

• All login attempts (successful and failed)
• Password changes and resets
• Two-factor authentication events
• Account settings modifications
• Integration connections and disconnections
• Data export requests
• Security alert acknowledgments

Log Retention

Security audit logs are retained for 90 days and can be exported at any time during this period.

Contact Security Team

If you suspect your account has been compromised or notice suspicious activity:

• Email: security@ascentia.app (monitored 24/7)
• In-app: Settings → Help → Report Security Issue
• Emergency: Use the "Lock My Account" button in security settings

What to Include

When reporting a security concern, provide:

• Your account email address
• Date and time of suspicious activity
• Description of what you observed
• Any relevant screenshots or alert emails
• Devices or locations involved

Response Time

Our security team responds to all reports within 2 hours. Critical security incidents receive immediate attention with account protection measures activated automatically.