Security and IP Access

QLens 8 supports IPv4, IPv6 and CIDR allowlists, password-authenticated users, IP-bound sessions, roles and audit records.

qlens security ip add 203.0.113.15/32 --note "Home office"
qlens security user add mamun --password 'CHANGE-ME' --role owner
qlens platform serve --host 127.0.0.1 --port 8780

When no allowlist exists, only loopback access is permitted. Put QLens behind Nginx or Caddy for TLS. Do not expose the FastAPI development server directly to the public internet.

IP filtering is a first gate, not a replacement for passwords and signed publication governance.