⚠ Intentionally insecure demo. Every secret here is fake. Do not enter real data. Test target for ShipTight.

TidyRoster

Shift scheduling for small teams. (A deliberately insecure demo.)

Try it

Sign in or open the dashboard.

Demo logins: owner@tidyroster.test / password123

What this is

This app is intentionally full of common mistakes (leaked keys, open data, missing headers, unsigned webhooks) so the ShipTight scanner has something to find. Nothing here is real.