Localhost only · No cash rewards
This preview is bound to 127.0.0.1:8001 on its host machine. It is not reachable by external researchers over the public internet. No monetary reward, bounty, or public safe-harbor promise is offered.
Testing scope
Only the Inzeal application instance that you own and run on your own computer at http://127.0.0.1:8001 is in scope. You may review the source code and test that local instance using dummy accounts and data that you created. Testing is not authorized against port 8000, other local services, other devices, networks, hosting providers, third-party services, or any public domain.
Keep testing safe
- Use only your own local instance, accounts, and synthetic test data.
- Do not access, copy, alter, or disclose another person's data or credentials.
- Do not run denial-of-service, load, destructive, brute-force, or automated high-volume tests.
- Do not use phishing, social engineering, malware, persistence, or tests against third-party services.
- Stop if a test unexpectedly reaches data or systems outside your local instance.
Reporting a finding
Set SECURITY_CONTACT_EMAIL in the private local .env and restart the app before collecting reports. Do not send security details through the general enquiry form.
For internet-based researcher testing, this local preview is not a suitable target. A public program requires a company-controlled public domain, an explicitly published scope, a dedicated security contact, and review of the terms before external testing is invited.
Back to website