Rallly

Awesome Privacy ➔ Productivity ➔ Scheduling ➔ Rallly

Open-source & self-hostable scheduling tool that helps you find the best date and time to meet. Create a poll with a few options, share the link, and let your participants vote on when they're available. No more back-and-forth emails.

Homepage: rallly.co
GitHub: github.com/lukevella/rallly
Discord: uzg4ZcHbuM
Web info: web-check.xyz/check/rallly.co

Open Source

Rallly Source Code

Author

lukevella

Description

Rallly is an open-source scheduling and collaboration tool designed to make organizing events and meetings easier.

#i18next#next-auth#nextjs#postgresql#prisma#react-email#t3-stack#tailwindcss#trpc#turborepo#typescript#zod

Homepage

https://rallly.co

License

AGPL-3.0

Created

27 Jan 15

Last Updated

20 Jul 26

Latest version

v4.11.1

Primary Language

TypeScript

Size

38,967 KB

Stars

5,167

Forks

538

Watchers

5,167

Language Usage

Star History

Top Contributors

Recent Commits

Luke Vella (20 Jul 26)
✨ Passwordless registration folded into a single login/sign up flow (#2689) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
💄 Render space tier with muted foreground in space dropdown (#2702) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
✨ Alert actions, indigo primary variant, and pending invite cleanup on downgrade (#2701) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
⏪️ Move settings back button to the sidebar header (#2700) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
✨ Show upgrade prompt instead of pending invites for hobby spaces (#2698) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Move UserProvider and user hooks into features/user/client.tsx (#2696) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Move Stripe client initialization into apps/web behind the billing feature flag (#2697) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Remove user.getAuthed from tRPC (#2692) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Remove spaces.getCurrent from tRPC (#2691) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
🐛 Redirect unregistered users to register page when upgrading from paywall (#2690) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Migrate space settings mutations from tRPC to server actions (#2687) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Replace user.getMe tRPC query with a server-fed UserProvider (#2688) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
💄 Redesign billing plan cards and render billing settings on the server (#2685) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
✨ Show SSO sign-up options on the registration page (#2686) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
🔥 Remove orphaned code (#2683) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
🔧 Pin turbopack.root so worktrees resolve their own lockfile (#2682) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
♻️ Refine PostHog space group backfill script - Rename script env vars to drop the misleading NEXT_PUBLIC_ prefix (POSTHOG_PUBLIC_API_KEY, POSTHOG_API_HOST) - Rename custom_branding_enabled property to custom_branding - Scope the backfill to spaces with an active multi-seat subscription or custom branding enabled, and stop blanking the old camelCase keys - Surface PostHog delivery failures via an error listener and exit non-zero when any batch fails to send
Luke Vella (19 Jul 26)
🐛 Use a shared distinct id for group identify events (#2681) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (19 Jul 26)
✨ Stitch guest server-side PostHog events to the client's anonymous id (#2680) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (17 Jul 26)
🔨 Add PostHog cleanup scripts: guest profile purge + space group property backfill (#2679) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (17 Jul 26)
📈 Track custom branding as a space group property (#2678) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (17 Jul 26)
♻️ Route server analytics through a guest-aware track() facade (#2677) Co-authored-by: Claude <[email protected]>
Luke Vella (17 Jul 26)
🐛 Don't create PostHog person profiles for guest users (#2676) Co-authored-by: Claude <[email protected]>
Luke Vella (16 Jul 26)
💄 Match PageTitle height to default button (#2675) Co-authored-by: Claude Opus 4.8 <[email protected]>
Luke Vella (16 Jul 26)
🐛 Fix seed script violating all_day_is_floating constraint (#2674) Co-authored-by: Claude Opus 4.8 <[email protected]>
Luke Vella (16 Jul 26)
♻️ Style svgs in DropdownMenuItem and remove DropdownMenuItemIconLabel (#2673) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (16 Jul 26)
♻️ Move isInjectedExtensionException into posthog utils (#2672) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (16 Jul 26)
⚡️ Disable prefetching on invite page links (#2671) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (15 Jul 26)
🐛 Fix session cookies being dropped by locale cookie writes (#2670) Co-authored-by: Claude Fable 5 <[email protected]>
Luke Vella (15 Jul 26)
💄 Add padding to poll header option columns (#2669) Co-authored-by: Claude Fable 5 <[email protected]>

Rallly Security

Security Advisories (11)

medium Patched CVSS 5.4

CVE-2025-65034 Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

19 Nov 25
medium Patched CVSS 6.5

CVE-2025-65032 IDOR in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names

19 Nov 25
medium Patched CVSS 5.4

CVE-2025-65033 Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation

19 Nov 25
medium Patched

CVE-2025-66027 Information Disclosure in Participant API Leaks Names and Emails Despite Pro Privacy Settings

28 Nov 25
medium Patched CVSS 6.5

CVE-2025-65028 IDOR in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Votes

19 Nov 25
medium Patched CVSS 5.4

CVE-2025-65029 IDOR in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants

19 Nov 25
medium Patched CVSS 4.3

CVE-2025-65030 Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

19 Nov 25
medium Patched CVSS 4.3

CVE-2025-65031 Improper Authorization in Comment Endpoint Allows User Impersonation

19 Nov 25
medium Patched CVSS 5.4

CVE-2025-65021 Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

19 Nov 25
medium Patched CVSS 4.3

CVE-2025-65020 Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)

19 Nov 25
critical Patched CVSS 9.8

CVE-2025-47781 Insufficient Password Login Token Entropy Leads to Account Takeover

14 May 25

Rallly Website

Website

Rallly: Free Group Meeting Scheduling Tool

Rallly is the fastest and easiest scheduling and collaboration tool. Create a meeting poll in seconds, no login required.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

IP Address 216.150.1.1
Location Walnut, California, United States of America, NA
ISP Vercel Inc
ASN AS16509

Associated Countries

Safety Score

Website marked as safe

100%

Blacklist Check

rallly.co was found on 0 blacklists

AntiSocial Blacklist
Artists Against 419
Badbitcoin
Bambenek Consulting
CERT Polska
CoinBlockerLists
CRDF
CryptoScamDB
EtherAddressLookup
EtherScamDB
Fake Website Buster
MetaMask EthPhishing
NABP Not Recommended Sites
OpenPhish
PetScams
PhishFeed
PhishFort
Phishing.Database
PhishStats
PhishTank
Phishunt
RPiList Not Serious
Scam.Directory
SecureReload Phishing List
Spam404
StopGunScams
Suspicious Hosting IP
ThreatFox
ThreatLog
TweetFeed
URLhaus
ViriBack C2 Tracker

Website Preview

View full report at web-check.xyz

Rallly Socials

Rallly Reviews

More Scheduling

Tymeslot
tymeslot.app

Open-source (AGPL-3.0), self-hostable scheduling and calendar platform. Guests book without creating an account; hosts get a full calendar with two-way sync to Google, Outlook and iCloud. A managed cloud plan is offered too, not self-hosted.

Open Source Tymeslot/tymeslot

View Tymeslot Report

About the Data: Rallly

Change History

Added Jul 20, 2026 by @ltguillaume #690

API

You can access Rallly's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/rallly

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Rallly

Help your friends compare Scheduling, and pick privacy-respecting software and services.
Share Rallly and Awesome Privacy with your network!

← Previous

Tymeslot

View Scheduling (2)