Isolated service
The public website runs separately from the core SpecFlow services and has no direct database connection.
Access to the work.
Not to everything.
Ingsera follows least-privilege principles: every user, service and interface receives only the access required for its purpose.
✓
Public layer protectedHTTPS · isolated runtime · protected API · browser security policies
Role-based access
Identity and permission are separate checks. Future workspace users will only see approved projects and actions.
Protected transport
HTTPS and browser security policies protect public traffic and restrict unsafe third-party content.
Least privilege
The Ingsera service runs under a dedicated system account with access limited to its own directories.
Controlled releases
Website versions are deployed separately without replacing SpecFlow data, backups or operational services.
OAuth readiness
Google sign-in will be enabled only after verified domains, approved callback addresses and user access rules are configured.
IMPORTANT
The demo contains no operational data
Projects, people and documents shown in the demo are fictional. Real sources will be connected through a separate protected API after authentication and roles are configured.