Rallly

rallly.co
Awesome Privacy➔ Productivity➔ Scheduling➔ Rallly
Rallly

Open-source & self-hostable scheduling tool that helps you find the best date and time to meet. Create a poll with a few options, share the link, and let your participants vote on when they're available. No more back-and-forth emails.

Avoid

  • calendly
  • cal.com
  • doodle

Also Consider

Open Source

Rallly Source Code

Author

lukevella

Description

Rallly is an open-source scheduling and collaboration tool designed to make organizing events and meetings easier.

#i18next#next-auth#nextjs#postgresql#prisma#react-email#t3-stack#tailwindcss#trpc#turborepo#typescript#zod

Homepage

https://rallly.co

Repository

  • LicenseAGPL-3.0
  • Created27 Jan 15
  • Primary languageTypeScript
  • Size71,725 KB
  • Stars5,309
  • Forks572
  • Watchers5,309

Language Usage

Language Usage

Project Health

  • Last commit1 day ago
  • Open issues5
  • Latest releasev4.15.4

Top Contributors

Recent Commits

  • Luke Vella(17 Oct 26)

    🥅 Validate license key input before rate limiting and querying (#3561) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(17 Oct 26)

    🔇 Ignore browser extension runtime.sendMessage errors in Sentry (#3559) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(17 Oct 26)

    💄 Match no-votes progress bar segment to the vote icon gray (#3557) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(17 Oct 26)

    ⬆️ Upgrade @sentry/nextjs to 11 so browser source maps upload (#3558) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    🥅 Tunnel browser Sentry events through a same-origin route (#3556) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    🌐 New Crowdin updates (#3552)

  • Luke Vella(16 Oct 26)

    Revert "⚖️ Link privacy policy, terms and cookie policy from the cloud app (#3551)" This reverts commit 9263b550d6ef5b67be43d536221f091005609be0.

  • Luke Vella(16 Oct 26)

    💄 Make skeletons visible against the background (#3553) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    ⚖️ Link privacy policy, terms and cookie policy from the cloud app (#3551) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    💰 Remove Organization license discount and set price to $499 (#3550) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    💄 Give buttons and links press feedback on touch devices (#3547) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    💄 Scroll dialogs as a whole instead of their content (#3549) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    Revert "💄 Mobile-friendly buttons and dialogs (#3546)" This reverts commit 509dae406d9c60d6b0df9dad1e3f2244f368f879.

  • Luke Vella(16 Oct 26)

    💄 Mobile-friendly buttons and dialogs (#3546) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    🔍 Target "doodle poll" in the Doodle page title and trim long meta descriptions (#3545) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    💄 Use icon buttons in the poll header on mobile (#3544) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    🥅 Refetch static assets past the cache before the chunk error reload (#3543) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    📸 Recapture the press kit screenshots (#3538) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(16 Oct 26)

    🐛 Track subscription starts when payment completes, not at creation (#3542) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(15 Oct 26)

    🌐 New Crowdin updates (#3541)

  • Luke Vella(15 Oct 26)

    🌐 Fix Crowdin brace artifacts and wording (#3539) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(15 Oct 26)

    🌐 New Crowdin updates (#3532)

  • Luke Vella(15 Oct 26)

    ⬆️ Move content moderation from gpt-4.1 to gpt-6-luna (#3537) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(15 Oct 26)

    🔍 Add FAQPage structured data and correct inaccurate FAQ answers (#3535) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(15 Oct 26)

    ⏱️ Delay the subscription feedback email and store queued email kind as text (#3536) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(14 Oct 26)

    🔍 Fix duplicate locale URLs, add home structured data and correct llms.txt (#3533) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(14 Oct 26)

    📝 Refresh "Is Doodle still free?" with the full free plan limits and pricing (#3530) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(14 Oct 26)

    🔍 Add BlogPosting structured data to blog posts (#3531) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(14 Oct 26)

    📝 Mention Zoom in the free finalizing post (#3529) Co-authored-by: Claude Opus 5.5 <[email protected]>

  • Luke Vella(14 Oct 26)

    🔍 Lead landing page titles with the queries they target (#3528) Co-authored-by: Claude Opus 5.5 <[email protected]>

Rallly Security

Security Advisories (14)

  • criticalPatchedCVSS 9.8

    GHSA-gmq4-f8j5-8w8qRemote code execution in poll preview images via vulnerable Next.js next/og

  • mediumPatchedCVSS 6.5

    GHSA-34w3-569j-j947Rallly: a space administrator can remove or demote the space owner, permanently locking the owner out of their own space

  • mediumPatchedCVSS 5.3

    GHSA-jprp-6gw6-jwcrUnauthenticated Access to Deleted Poll Data via Public API

  • mediumPatchedCVSS 5.4

    CVE-2025-65034Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

  • mediumPatchedCVSS 6.5

    CVE-2025-65032IDOR in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names

  • mediumPatchedCVSS 5.4

    CVE-2025-65033Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation

  • mediumPatched

    CVE-2025-66027Information Disclosure in Participant API Leaks Names and Emails Despite Pro Privacy Settings

  • mediumPatchedCVSS 6.5

    CVE-2025-65028IDOR in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Votes

  • mediumPatchedCVSS 5.4

    CVE-2025-65029IDOR in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants

  • mediumPatchedCVSS 4.3

    CVE-2025-65030Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

  • mediumPatchedCVSS 4.3

    CVE-2025-65031Improper Authorization in Comment Endpoint Allows User Impersonation

  • mediumPatchedCVSS 5.4

    CVE-2025-65021Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

  • mediumPatchedCVSS 4.3

    CVE-2025-65020Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)

  • criticalPatchedCVSS 9.8

    CVE-2025-47781Insufficient Password Login Token Entropy Leads to Account Takeover

Rallly Website

Website

Rallly: Free Group Meeting Scheduling Tool

Rallly is the fastest and easiest scheduling and collaboration tool. Create a meeting poll in seconds, no login required.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address216.150.1.1
  • LocationWalnut,California,United States of America,NA
  • ISPVercel Inc
  • ASNAS16509

Associated Countries

  • USUS
  • CACA

Safety Score

Website marked as safe

100%

Trackers

No known trackers found

Blacklist Check

rallly.co was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

Rallly Socials

Rallly Reviews

More Scheduling

  • Tymeslot

    Tymeslot

    tymeslot.app

    Open-source (AGPL-3.0), self-hostable scheduling and calendar platform. Guests book without creating an account; hosts get a full calendar with two-way sync to Google, Outlook and iCloud. A managed cloud plan is offered too, not self-hosted.

    Open Source Tymeslot/tymeslot
    View Tymeslot Report
View More...

About the Data: Rallly

Change History

Edit Rallly Data

You can edit Rallly's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete Rallly Submit Edit to Rallly Add alternative

API

You can access Rallly's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/rallly

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Rallly

Help your friends compare Scheduling, and pick privacy-respecting software and services.
Share Rallly and Awesome Privacy with your network!

← Previous

Tymeslot

View Scheduling (2)