
Bitsgap Review
Refusing API keys that can withdraw, across 16 named exchanges
of 10
Bitsgap scores 8.8 in crypto trading tools on desk research of its public pages: it rejects withdrawal-enabled keys, names its exchanges and its Dubai operator, and publishes every tier. No security audit is named, which keeps security at 8.
Pricing
Free; Basic $29, Advanced $69, Pro $149/mo; $23, $55, $119/mo annually
Custody
Non-custodial; rejects API keys with withdrawal access
Security
RSA-2048 in-browser key encryption, IP lock, OTP login; no audit named
Exchanges
16 named on the pricing page (page states 17)
Entity
Bitsgap Software Solutions FZCO, Dubai; reg. 57541, licence 59990
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (9.0 + 10.0 + 9.0 + 8.0 + 8.0) ÷ 5 = 8.8.
Pros
- Custody & API safety (10): rejects any API key with withdrawal access enabled
- Security posture (8): RSA-2048 key encryption in the browser, IP locking and one-time-code login
- Venue coverage (9): 16 exchanges named, from Binance and Kraken to Hyperliquid
- Pricing transparency (9): free plan plus three tiers published monthly and annually
- Entity transparency (8): Bitsgap Software Solutions FZCO with registration and licence numbers
Cons
- No security audit, certification or bug bounty is named
- The app's seller is a different company, Bitsgap Holding OÜ, with no stated link
- The terms say Bitsgap holds no UAE virtual asset or financial services licence
- Monthly prices run $29 to $149; the lower quoted figures need annual billing
How Bitsgap scores in crypto trading tools
Bitsgap is rated in our crypto trading tools ranking, where each tool gets five marks from 0 to 10 at equal weight. The marks come from desk research of Bitsgap's public pages, checked on 6 November 2026; we did not connect an exchange or run a bot.
| Criterion | What the public record shows | Mark |
|---|---|---|
| Pricing transparency | Free plan; Basic $29, Advanced $69, Pro $149 a month, or $23, $55 and $119 a month billed annually. Seven-day Pro trial, no card. | 9 |
| Custody & API safety | Funds stay on the exchange, and the security page says Bitsgap rejects any API key with withdrawal access enabled. | 10 |
| Venue coverage | 16 exchanges named on the pricing page, which also states a count of 17. | 9 |
| Security posture | Keys encrypted with RSA-2048 before leaving the browser, IP locking to Bitsgap addresses, one-time-code login. No audit named. | 8 |
| Entity transparency | Bitsgap Software Solutions FZCO, Dubai, registration 57541 and licence 59990, named in the footer and the terms. | 8 |
The overall score is the plain average: (9 + 10 + 9 + 8 + 8) ÷ 5 = 8.8.
Two marks moved at this check, both because Bitsgap's security page documents what the July review could not find on the pricing page. Custody & API safety rose from 8 to 10: Bitsgap now states that keys with withdrawal access fail verification and will not connect. Security posture rose from 6 to 8: the page replaces the earlier "bank-grade encryption" wording with a named method and specific controls. The earlier score was 8.0.
Strongest criteria
Custody & API safety (10). This is the top of the scale, and Bitsgap reaches it by enforcement rather than advice. Most tools in the category tell users to switch off withdrawals when they create a key; Bitsgap says it will "reject any key that has withdrawal access enabled," so a key that could move funds off the exchange cannot be connected at all. Bitsgap never holds the funds; they stay in the user's exchange account.
Pricing transparency (9). The pricing page shows four plans with monthly and annual prices, bot limits per plan (3 GRID and 10 DCA bots on Basic up to 50 and 250 on Pro), backtesting depth and a free tier that runs demo bots. Prices are in US dollars. The July review quoted only the annual-billing figures; the monthly prices are higher, and both are now shown.
Venue coverage (9). The page names Aster, Binance, Bitfinex, Bitget, Coinbase Advanced, Crypto.com, EVEDEX, Gate.io, Gemini, HTX, Hyperliquid, Kraken, KuCoin, OKX, Poloniex and WhiteBIT. That is a full named list, which the rubric ranks above a count. The page's own figure of 17 does not match the 16 names, a small discrepancy that does not change the mark.
Weakest criteria
Security posture (8) is held below the top for a gap in evidence, not an adverse finding. The controls are specific: client-side RSA-2048 encryption of keys, IP restriction checked when a key is added, and two-factor login by one-time code. The page is also candid that a leaked trade-only key "can still expose your balance and trade history, or place unwanted trades within its scope." Those are three of the six controls the category's security scale counts (a named key-protection method, IP locking and two-factor login), and three score 8. What is missing is any named audit, certification or bug-bounty programme. Bitsgap's homepage says the platform has had no breaches since 2017; that is the company's own statement, and the security page records no incidents.
Entity transparency (8) names a company with registration and licence numbers in a stated free zone. It stays at 8, level with other tools that name a company, its registration number and its jurisdiction, and not higher for two reasons found in the record. Apple's App Store listing names the app's seller as a different company, Bitsgap Holding OÜ, an Estonian private limited company, and Bitsgap's own pages do not explain the relationship. And the terms say Bitsgap holds no virtual asset or financial services licence in the UAE. That is a disclosure, not a breach, since Bitsgap describes itself as software rather than a financial service, but it means the named licence is a business licence only.
What the score does not cover
- Bot returns. The homepage publishes profit and user figures without a stated method; past bot results do not predict future ones, and no criterion measures them.
- Exchange fees on every fill, which add up quickly on a busy grid. See our guide to maker and taker fees.
- EVEDEX, a derivatives venue that Bitsgap's own page describes as part of its ecosystem without saying who operates it. It is scored only as one entry in the venue list.
- Ease of use, support and execution speed, which cannot be evidenced without using the product.
Bitsgap vs Altrady and 3Commas
On current marks Bitsgap ranks first of ten at 8.8. Altrady, at 8.4, is 0.4 points behind. They match on pricing, venue coverage and entity transparency. Bitsgap is a point ahead on custody, because it refuses withdrawal-enabled keys rather than only never requesting them, and a point ahead on security (8 against 7), because it names its encryption method where Altrady does not. 3Commas, also at 8.4 and 0.4 points behind, uses the same hosted API-key model. It matches Bitsgap on pricing (9), security (8) and entity (8), and trails on custody (9 against 10) and venues (8 against 9).
Who it suits
The score fits someone who wants hosted grid or DCA bots on mainstream exchanges, with the platform itself blocking keys that could withdraw funds, and who accepts that a trade-enabled key on a third-party server still carries risk. Our ratings methodology sets out how each criterion is defined.
How it compares

3Commas
Published pricing and non-custodial, trade-only API keys

Altrady
API-only bots across 19 named exchanges from a named Dutch firm

Cryptohopper
No-withdrawal custody with plan prices and refund terms in full

Coinrule
Trade-only API keys written into its terms, with a named UK operator

TradingView
Charting with full plan pricing and refund rules, no custody

Gunbot
Self-hosted bot that keeps exchange keys on your own machine

BonkBot
Documented key security and a named Swiss operator on Solana

Trojan
Solana trading in Telegram with a stated 1% fee and named operator

Banana Gun
A published percentage fee across eight chains
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Bitsgap — pricing (tiers, exchanges, entity footer) — checked
- 2.Bitsgap — security page — checked
- 3.Bitsgap — terms and conditions — checked
- 4.Apple App Store — Bitsgap: Crypto Trading Bots (seller) — checked
- 5.Bitsgap — homepage — checked
Frequently asked questions
Why does Bitsgap score 8.8?
It averages five equal marks: 9 for pricing, 10 for custody and API safety, 9 for venue coverage, 8 for security posture and 8 for entity transparency.
Why did the score rise from 8.0?
The security page now states that keys with withdrawal access are rejected, lifting custody from 8 to 10, and names RSA-2048 encryption, IP locking and one-time-code login, lifting security from 6 to 8.
What holds Bitsgap back?
No named audit or certification, and an entity picture with a loose end: the app is sold by a different company, Bitsgap Holding OÜ, and the terms confirm no UAE financial licence.
Can a Bitsgap API key withdraw my funds?
Bitsgap says it rejects keys with withdrawal access, so a connected key cannot move funds off the exchange. A leaked trade-only key can still place trades, so IP locking matters.
How does Bitsgap compare with Altrady and 3Commas?
Both score 8.4, 0.4 below Bitsgap. Altrady matches it on pricing, venues and entity and trails on custody and security. 3Commas matches it on pricing, security and entity and trails on custody and venues.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.