Localify installs a local certificate authority limited to its own domain suffix, and manages local DNS. On macOS it asks for an administrator's approval once at install and keeps no root process afterwards. Security reports are taken seriously.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub: Report a vulnerability.

Include as much of the following as you can:

• affected version and operating system
• a description of the issue and its impact
• steps to reproduce or a proof of concept

You should receive an acknowledgement within a few days. Please give us a reasonable amount of time to ship a fix before disclosing the issue publicly.

Only the latest released version receives security fixes.