The red team of your trading strategy

Your strategy wins in backtest.
We try to make it lose.

Coldshim is a red team for trading strategies. We replay yours across a broad universe of markets and timeframes, with a real broker's costs, against thousands of random draws. What survives is rare — and what doesn't, you'll know before you put money on it.

Have a strategy checked See a sample report
771
public strategies tested
148
symbols tested
11
vault tests
99.4%
entries identical to TradingView (6,327 / 6,364)

771 public strategies tested across five market families. 2 vault tests passed — See the results →

Backtest ≠ validation

A backtest is not a validation.

The strategy tester answers "what would this script have made on this chart?" Coldshim answers "does this edge exist, at your broker, once the costs are paid?"

QuestionTradingView backtestColdshim report
DataChart feed, often different from the broker's✓M1 bars from your broker's MT5 server
SpreadFixed or zero, entered by hand✓Real spread minute by minute, buy at ask, sell at bid
Commission & swapApproximate or absent✓The account type's commission schedule, applied to every trade; swap per direction, per night
Intrabar executionNext bar's opening price✓Trade-list replay (Path 2): every order placed at the minute its price is actually touched
ChanceNot tested✓200 placebo draws: same durations, same directions, random dates — whole episodes for strategies that pyramid
Stability over timeA single curve✓Three chronological thirds, each one must be positive
GeneralisationOne symbol, one timeframe✓several symbols × several neighbouring timeframes
LookaheadNot detected✓Future prices perturbed: past signals must stay identical
VerdictA curve and a percentage✓ROBUST, REJECTED or INCONCLUSIVE, with every calculation
Why backtests lie

Why your backtest lies to you.

A beautiful backtest is most often a portrait of past chance, not of an edge. The phenomenon has a name: overfitting.

The coin experiment

Ask 50 people to flip a coin 10 times. One of them will probably get 9 heads out of 10 — no talent, just mechanics. Test 50 strategies, keep the best, and you get the same thing: a champion of chance that looks like an edge.

Filing the key

You try EMA 9/21, then 8/23, then 10/50, and keep the best. With each setting, the strategy clings a little more to the noise of a past that won't repeat.

Keeping the winner

You test 50 ideas and keep only the one that worked. None was optimised — and yet the result is just as false.

The telltale signs
  • ·a superb backtest, then failure in live trading within the first weeks
  • ·a result that collapses when a parameter moves one notch (EMA 21 → 22)
  • ·a result on a single symbol or a single timeframe
  • ·a curve too smooth to be true

It isn't a trader's flaw. A tester that instantly recalculates with every shifted setting is an overfitting machine that feels like research. Many scripts and courses sold with perfect curves are its direct product — sometimes without their authors knowing.

How Coldshim breaks each mechanism
The trapColdshim control
The key filed for a single lock✓several symbols × several neighbouring timeframes
What only works on one period✓Three chronological thirds, each one positive
What chance alone would have produced✓200 placebos to beat
A protocol chosen after seeing the result✓Rules of engagement fixed before the test
A forgotten cost that manufactures a false edge✓Real broker spread, commission and swap

And the length of history?

"Too short" when it's short, "too old" when it's long — the question is badly posed. What matters is enough trades (at least ~300), at least one downturn and one high-volatility episode, on a market that's still the same today. For scalping or intraday: 3 to 5 years of broker data. And the protocol is decided before looking at the result.

Why "red team"

The red team of your strategy.

Coldshim applies to your strategy what SECURIX applies to your systems: an attack run for you, not against you. We don't look for the strategy that wins; we attack yours to find out whether it holds.

SECURIX red team (Scrytide, Nightprill)Coldshim
What we attackYour perimeter, your brand✓Your trading strategy
Rules of engagementPerimeter signed before the audit✓Symbols, timeframes, broker and history fixed before the test
Tools verifiedDetection of known flaws✓Calibration: chance rejected, a future-reading signal caught, a planted edge found
False positives discardedEvery finding verified✓200 placebos: an edge must beat chance
EvidenceA reproducible finding✓A reproducible report, SHA-256 fingerprints
IndependenceThe auditor doesn't fix what it audits✓We don't optimise your parameters
RecurrenceThe threat evolves✓Market regimes and spreads evolve

Whoever commissions a red team isn't the one who wrote the code — it's the one who carries the risk. For a strategy, that's whoever allocates the capital.

What you're actually buying

You're not paying for a curve.
You're paying to know whether to stop.

A Coldshim validation replaces a quant analyst's work on one strategy — roughly 2 to 4 working days — delivered in 2 business days.

Pull 3 years of M1 bars and spreads from the broker2–4 h
Build the cost model — real spread, commission and swaps per direction2–3 h
Port the script faithfully — down to the edge cases a careless port gets wrong4–8 h
Lookahead check — confirm the script doesn't read the future1–2 h
Run the grid — several markets across the timeframe ladder3–6 h
Placebo & thirds — 200 random draws, chronological split2–4 h
Write the report — verdict, tables, integrity fingerprints3–4 h
Per strategy · analyst-equivalent17–31 h

And you're not paying for a curve: you're paying to know whether to stop — before you put real money behind it.

The engine

Fifteen checks, every strategy.

Each one is applied to every strategy. A result on a single symbol and a single timeframe is not a result.

01

Broker data

M1 bars pulled from the MT5 terminal connected to the broker's real server, up to 3 years of history.

02

Feasibility map

For each symbol and timeframe, the spread / candle-range ratio: green where the cost is negligible, red where scalping is mathematically lost before it starts. You know before testing.

03

Real spread

Every minute's spread, buy at the ask, sell at the bid; a deliberately conservative percentile is the reference cost.

04

Commission schedule

The account type's commission schedule, applied to every trade.

05

Swap

Per direction, per night, converted whatever the broker's mode; an unsupported mode is flagged, never silently counted as zero.

06

Faithful port

The Pine Script is translated with its exact semantics — down to the edge cases where a careless port and TradingView quietly disagree. When a faithful translation can't be guaranteed, we say so rather than guess.

07

Lookahead detector

We test whether any signal depends on data it couldn't have had at the time — if it does, it's reading the future.

08

Neighbourhood grid

Several markets across a ladder of timeframes — an edge that lives on one timeframe alone is noise.

09

Placebo

200 ghost strategies with the same durations and directions, at random dates. The real strategy must beat the large majority of them. For a strategy that adds to its position, whole episodes are moved together — a placebo that shuffles single trades is far too easy to beat.

10

Three thirds

History is cut into three periods; each one must be positive. An edge carried by a single lucky stretch fails here.

11

Safety margin

The gross edge must clear the cost by a comfortable margin, over a meaningful number of trades.

12

Robustness rule

ROBUST only if all of this holds across several neighbouring timeframes and several markets. A single box is not a result.

13

Port fidelity

Our engine is checked against real TradingView exports: a reference is FAITHFUL when ≥ 95% of entries and ≥ 90% of exits are identical. A script using features we can't reproduce exactly is marked UNFAITHFUL.

14

Intrabar dependence

When at least 25% of trades open and close inside the same candle, the result depends on an assumption about the order of prices — verdict INTRABAR.

15

Sealed vault

Before the final replay, the rules and the success threshold are hashed and timestamped (SHA-256 + OpenTimestamps). The unseen-date run happens once, against a bar set in advance.

The engine is tested too — and it signs for it.

Before every campaign the engine runs three controls on reference markets: a random signal must be REJECTED, a signal that reads the future must be caught, and a deliberately planted edge must be found. If any one of the three fails, no verdict ships. When all three pass, the run carries a calibration attestation — timestamped and hash-signed — printed with the report.

The six verdicts
ROBUST
Survived every check, including the unseen-date vault.
REJECTED
No edge beyond chance once real costs are paid.
INCONCLUSIVE
Not enough coverage to decide either way.
UNFAITHFUL
The port couldn't be matched to the reference — we won't certify what we can't reproduce.
INTRABAR
The result hinges on intrabar fills we can't prove happened.
LOOKAHEAD
The code reads data that hadn't arrived yet; the box is excluded from the verdicts.
Markets covered

Five families, one MT5 broker.

The public study covers 148 symbols across five families, all at a single MT5 broker. For a client, the engine works on any symbol of your own MT5 broker.

Family Markets Vault history (2020–2023) Costs applied
Indices · 16NAS100, US500, US30, GER40, UK100, JPN225, HK50…Complete, except US2000 (no history before 2023)p90 spread, real swaps
Forex · 12EURUSD, GBPUSD, USDJPY, AUDUSD, EURJPY…Completep90 spread (90 days), commission, swaps
Metals & energy · 8Gold, silver, platinum, copper, WTI, Brent, natural gas…CompleteAs forex
Crypto (CFD) · 8BTC, ETH, LTC, SOL, BNB, ADA, DOGE…Partial (SOL from Feb 2022, DOGE from Jul 2020)CFD spread & funding (~15%/yr long)
Stocks (CFD) · 104Apple, Microsoft, Amazon, Tesla, JPMorgan…Vault 2021–2023, complete for all 104 (stocks listed later than April 2021 are left out)Spread, real swaps

A crypto verdict is for a CFD at this broker — not a spot exchange or a perpetual. An "exchange-cost" variant is planned but not yet available, and we don't promise it.

The vault — the final gate

A verdict on dates no one has seen.

Clearing the grid is not enough. Test hundreds of strategies and some pass by luck — only unseen dates can tell them apart.

First, it holds across space

ROBUST requires the edge to hold across several neighbouring timeframes and several markets — not one lucky box.

Then it survives unseen time

One single replay on a period no earlier step has seen, against a success rule set in advance, before the calculation.

11 hypotheses reached the vault. 9 failed, 2 passed.

Both that passed are on stocks, from the same public script, now trading live. A rule set in advance stops a result being retouched after the fact: without the vault, the nine that failed could have been presented as winners.  See the register →

Two paths

Two paths, by what you can show us.

Your code stays with you if you want it to — but a trade list gets you an audit, not a full validation: we check whether the track record holds after real costs. Only the code can be replayed on other markets and taken to the vault.

Path 1 — Open codePath 2 — Protected strategy
What you provideYour strategy's rules — a Pine or MQL script, or the logic written outA trade list with timestamps — your TradingView "List of trades" export, or the equivalent from MT5 or your platform (CSV or Excel)
What we doPort, lookahead detector, full symbol × timeframe gridEach entry and exit replayed on the broker's M1 bars, at the minute the price is touched
Time offsetNot applicableAuto-detected and aligned to the broker's time
Integrity checkLookahead detector on every signal; port fidelity vs TradingView stated in the reportAlert if replayed gross differs from TradingView by more than 2% on the same feed
Possible verdictROBUST, REJECTED, INCONCLUSIVE — plus integrity verdicts (UNFAITHFUL, INTRABAR, LOOKAHEAD)Holds / doesn't hold after real costs — never ROBUST (no other markets, no vault)
What stays invisible—Repaint and rule detail, since we only see the trades

On a demo account, a strategy export was replayed to the cent: −81.50% on TradingView, −81.50% gross at the broker — then −91.18% once real costs were deducted.

The report

A verdict on page one.
Then every figure behind it.

A verdict on page one — then a full, multi-page document with every chart, table and figure behind it. Each report contains:

  • ·the verdict box and key metrics (trades, net per trade, average cost, edge / cost)
  • ·the symbol × timeframe heat map, or the TradingView / broker-gross / broker-net comparison
  • ·the placebo distribution and the three-thirds equity breakdown — charted, so the verdict is visual, not just a number
  • ·the cost and execution detail (open, intrabar, not found)
  • ·the alerts: margin calls, integrity gap, unsupported swap modes
  • ·the method, the limits, and the calibration attestation for the run
  • ·the SHA-256 fingerprint of data and scripts, so a third party can verify the result
A verdict, as it reads
EMA 9/50 crossover scalper Rejected
Tested across the full market × timeframe grid, 3 years of data, real broker costs. One box passes — a single market on a single timeframe. Its neighbouring timeframes fail, and an identical box appears on purely random data during calibration. Conclusion: this result is consistent with chance. Do not trade.
The proof

771 public strategies tested. On the indices, none has passed the vault yet.

We took TradingView strategies published under open licence and ran them through Coldshim, one by one, without changing their settings, across five market families. 11 hypotheses reached the vault; 2 passed, both on stocks. The detailed counts (backtests, simulated trades, placebos) will be published once recalculated with the corrected engine.

771
public strategies tested
2
passed the vault

Popularity is not proof. A strategy loved by thousands of traders may have no edge — we checked, on 771 of them.  See the full register →

How far we go

We say what we don't measure.

We state the boundary of every verdict, in each report.

The verdict is an upper bound. Live trading only adds costs: a rejected strategy won't look better live.

Slippage beyond the real spread isn't modelled — so live results can only be worse than what we measure. ROBUST means "the edge survived every test," not "you will win." The past is not a promise.

Slippage

Not modelled beyond the real spread; the verdict is therefore an upper bound.

Repaint, on Path 2

Invisible, since we only see the exported trades.

Port fidelity, on Path 1

Measured against a TradingView reference within a stated tolerance; beyond it the run is marked UNFAITHFUL. A residual gap under tolerance is possible and is stated in the report.

The past is not a promise

ROBUST means the edge survived every test — not that you'll make money.

Volume-based rules

TradingView and MT5 brokers don't publish the same volume. A strategy filtering on volume can take different trades on each; our verdict holds for the broker's data.

What we don't do
  • ✕We don't sell signals, strategies or investment advice.
  • ✕We don't optimise a strategy's parameters until it passes.
  • ✕We never publish a client's code or results without written consent.
For a professional buyer

A verdict you can put in front of a committee.

A Coldshim verdict is reproducible: same data, same scripts, same fingerprints, same result.

You areYour questionWhat Coldshim brings
Prop firm, copy-trading platformDoes this strategy deserve allocated capital?✓An independent entry filter, before allocation, applied to every candidate by the same rule
BrokerAre our clients losing to scripts that don't survive our costs?✓A service to offer your clients, on your own server data
Allocator, family officeDoes the presented track record hold after costs?✓Independent replay of the trade list, without access to the code
Honest script vendorHow do I prove my tool isn't a flattering backtest?✓A verifiable report to attach to your product page

Your trading data is processed on our servers, hosted in the EU, and deleted within 30 days of the report — we keep only the SHA-256 fingerprints, so a verdict stays verifiable. Prefer not to send files? We can pull the history over a read-only MT5 connection.

Fit

Who this is for — and who it isn't.

Being clear about this saves us both a wasted meeting.

Built for you if…

  • ✓You're about to put real money — yours or your clients' — behind a strategy
  • ✓You'd rather have a reasoned "no" today than an empty account in six months
  • ✓You must justify an allocation to a committee, a partner or a regulator

Probably not if…

  • ✕You want a turnkey winning strategy — we don't sell one
  • ✕You want the parameters tuned until the curve looks good
  • ✕Your broker doesn't offer MetaTrader 5 — Coldshim works on MT5 only
Pricing

Priced by what we can prove.

What you send us decides what we can prove — so the price follows the level of proof, not a flat fee. A trade list buys an audit; only the code passes the vault.

€0
free check

Start with one box, free.

One TradingView export — 1 symbol, 1 timeframe — replayed on your broker's M1 bars: TradingView result, broker gross, net after real costs. A one-page verdict, a 30-minute call to read it together. Under NDA, within 5 days. One per client.

Request a free check
Offer You provide What we prove Vault
Audit — track record
€190
A trade list (export) or investor MT5 access Real costs, reachable prices, placebo, three-thirds stability, share of intrabar trades → does the track record hold after costs? No
Black box
€590
A compiled MT5 robot (.ex5) — the code stays invisible Execution on markets, timeframes and periods we choose; costs, placebo, robustness On the future only
Full validation
€690
The Pine code, under NDA Everything — fidelity, look-ahead, the grid on the declared market, placebo, robustness, and the pre-registered, timestamped vault Yes — one attempt
Sealed follow-up
€90 / mo · 3 mo min
A timestamped fingerprint of the code, then the real trades (investor access or alerts) Real performance after the seal, a monthly report; the fingerprint proves nothing was changed The future is the vault

Black box runs on compiled MT5 robots (.ex5): we prove how the strategy holds out-of-sample without ever seeing the code.

Two rules we print on every report: page one states which offer was performed, what was tested and what was not — and an audit can never carry the verdict ROBUST (only a full validation reaches the vault).

Working with us regularly? Use credits.

Pro
Active trader, small fund, vendor with a catalogue
€3 900/ year
6 credits a year — around €650 each
  • ✓Full validation or black box = 1 credit · audit = ½ credit · 3 months of sealed follow-up = 1 credit
  • ✓Priority delivery · up to 3 re-tests per validation
  • ✓1 review call per quarter
Talk to us
Recommended
Platform
Prop firm, broker, copy-trading platform
€15 000/ year
24 credits a year — around €625 each · higher volumes on quote
  • ✓Set your own acceptance bar, once — applied identically to every strategy, printed and hash-signed; a built-in guard that downgrades the verdict to inconclusive if random strategies would pass it (on the roadmap)
  • ✓Optional read-only MT5 connection · co-branded reports · an aggregate verdict feed for your allocation pipeline (on the roadmap)
  • ✓Monthly calibration attestation (timestamped, hash-signed) · dedicated contact, 24 h response
Talk to us
Group
Several entities, brokers or MT5 servers
On quote
larger volumes · framework contract
  • ✓Several entities, several MT5 servers or several brokers
  • ✓Framework contract and bespoke security terms
  • ✓Option to run the validator on your own VPS
Talk to us
We charge for the work — never for the verdict.

A "no" costs exactly what a "yes" costs. We're never paid more for a robust result than a rejected one — anything else would pay us to tell you what you want to hear. And we don't optimise your parameters until they pass: a validator that tunes is no longer independent.

FAQ

Questions, answered.

My TradingView chart isn't at the same broker as my MT5. Does that matter?

For an indicator or a coded strategy (Path 1), no: only the data of the broker connected to MT5 counts. For a trade list (Path 2), the same broker gives an exact integrity check; a different broker on the same instrument still works, and the replay refuses beyond a tight price-deviation tolerance.

Do you need my code?

No — but without the code we prove less. An audit (from a trade list) tells you whether a track record holds after real costs; only a full validation (from the code) can replay the strategy on other markets and take it to the vault.

Which brokers?

Any broker offering MetaTrader 5, and MT5 only. Costs are measured at the one you actually use.

Which markets and timeframes do you test?

The representative universe for your instrument — the markets your strategy is meant for, each across the timeframe ladder that fits it. We cover five families — indices, forex, metals & energy, crypto and stocks (see Markets covered). We don't test M1 by default: at one-minute bars the spread and commission usually dwarf the move, so the result is mostly cost noise — but if your strategy is genuinely built for M1, we include it.

What if I'm not on MT5?

MT5 is what lets us measure your own broker's real costs. If you're not on MT5, we can still test the strategy's edge on a representative MT5 broker's data for the same instrument — the overfitting and robustness findings carry over — but we can't certify your exact broker's costs. In short: the edge, yes; your-broker cost precision, only on MT5.

How long does it take?

Within 2 business days for a validation; faster on a subscription. The free check within 5 days.

What happens to my files?

Processed on our servers, hosted in the EU, deleted within 30 days of the report being delivered, never shared. Only the SHA-256 fingerprints are kept, to verify a report.

Do you test re-entries, stop-loss and take-profit?

We test your strategy exactly as you define it — re-entries, SL and TP included if they're part of your rules. What we don't do is search for better parameters: trying dozens of SL/TP percentages and keeping the best is precisely what manufactures an overfitted backtest. We validate one configuration; we don't tune it.

Can you improve my strategy?

No, and that's deliberate: a validator that optimises is no longer independent.

How do you tell a real edge from luck?

Test enough strategies — or one strategy on enough markets and timeframes — and some will look profitable by pure chance. We measure that directly: every result is put against hundreds of random draws with the same shape, checked on separate periods, and confirmed on neighbouring timeframes — with a final replay on dates no earlier step has seen. An edge that shows up in only one place, or that random data reproduces, is luck. We say so.

Do you find where my strategy works?

No — and that's the point. Hunting through markets and timeframes for the one combination where a strategy happens to look profitable is exactly the overfitting we test against: search long enough and you'll always find a lucky cell. We test whether the edge you claim holds up on the instrument it's meant for. A verdict is always scoped to what was tested — a "rejected" strategy didn't show a robust edge on the markets and timeframes listed in its report; it is not a claim that no edge could exist anywhere.

Why re-test an already-validated strategy?

For the same reason you re-run a red team: the ground shifts. Market regimes, volatility and broker spreads change; an edge that was robust a year ago may be gone.

Send us your trade list.
We'll tell you whether it survives real costs.

We'll replay it at your broker, with its real costs, against 200 placebos — and give you a one-page verdict. Free, under NDA.

Request a free check
One export · mutual NDA · a one-page verdict within 5 days · we only test what you authorise in writing.