Admin security settings is a very important option.
- First of all, you should change the name of the admin file. 
The system will not let you enter the admin area until the file name is changed.
- Implemented option to mop up the referral when going from the admin area to the links.
- Two-factor authentication (2FA) Google Authenticator login for admins.
Customizable for each of the admins.
- Admin login notification can be enabled.
The main admin will be notified which admin is logged in and when.
Full description of security settings in the administrators documentation supplied after the software purchase.
- IP access to the admin panel - access only from the entered IP.
If IP changes, you can enter a subnet mask or do not fill in the field.
- Limit admin panel access by time - this option does not limit access to the admin panel for the main sysadmin.
These settings are for added administrators (managers).
- Limit admin panel login by days of the week - for added administrators (managers).
- Restriction of adding information by time and by days of the week.
Refers to information sections.
Information will be sent for moderation, regardless of group settings and module settings.
- Keep record of admins online - option to enable output of admins who are on the site.
- Record logs of actions in admin panel - customizable option to keep logs of actions. 
- Recording admin panel login logs - admin and user login logs. The option is customizable.
- Restrict login to admin panel with the same login but different IP at the same time.
- File upload logs, allowed extensions of uploaded files, size limit of uploaded files, file directory selecion - for information pages.
- Referral verification - checks from which site the request comes. It excludes data substitution.
- Domain aliases - no need to fill in if one domain is used by default.
- Allow JS scripts for domain aliases - enable to output user data when going to an authorized users alias.
- Limit system load factor - distribute the load on the system in case of possible DDOS attacks. 
only for Unix/Linux systems. Optimal values from 5 to 10 if the site is under DDOS attack. Set 0 if the site is operating normally.
- cookie domain and cookie prefix - detailed settings in the administrator documentation supplied after the software purchase.
- Logon file - the name of the file can be changed.
- User panel login file - the file name can be changed.
Optional for exchanges
In addition to the standard security settings, AOS uses additional and in some cases unique security methods.
Crypting of secret keys and passwords.
Additional hash validation of all fields to be filled in.
Unique request authentication hash.
Encryption of POST requests during transaction creation.
Hash of data matching verification during transaction processing.
Additional private security algorithms.