01 · Feature
Everything about the work, on the card
Members, labels, start and due dates, checklists, custom fields, attachments, votes and a comment thread with mentions and reactions — open a card and the whole story is there.
.NET 10Self-hosted project management
Just like Trello.
Your server.
Your rules.
Everything your team loves about Trello — kanban boards, drag-and-drop cards, labels, checklists, due dates and automation, plus Timeline, Calendar, Table and Dashboard views. No learning curve, no per-user fees: one ASP.NET Core 10 app you host yourself, in English and Arabic.
Demo sign-in: layla@tasko.local·TaskO@2026
ASP.NET Core 10
SQL Server
ADO.NET
Vanilla JavaScript
Docker
In the package
13
features,
one install
one install
Views01
Kanban boards
Timeline
Calendar
Table view
Dashboards
Work02
Custom fields
Checklists
Templates
Workspaces
Automate03
Automation rules
PDF export
Platform04
English & العربية
Two-step sign-in
38Signed-in screens, 8 of them in the administration area
5Board views: board, timeline, calendar, table and dashboard
35Database tables, created from one schema script
21Automation triggers, plus scheduled and due-date rules
2Interface languages, English and Arabic
What sets it apart
Built for teams, not bolted together.
Six things that separate TaskO from the usual to-do list with a login screen in front of it.
Five views of one board
Board, Timeline, Calendar, Table and Dashboard all read the same cards, so a date dragged on the timeline is already right on the calendar.
03
21triggers
Automation that runs on your server
Rules react to 21 kinds of board event, and a background scheduler runs the timed ones — reminders, due-date rules and scheduled jobs — every minute, with a log of each run.
Lists that keep the team honest
A work-in-progress limit shows when a list is overloaded, and lists can be coloured, collapsed and dragged into a new order.
Made for the region, and for everyone
The interface, its messages and its exports in English or Arabic — down to the PDF and CSV headings — plus the settings people need to work comfortably.
English
العربية
Dark mode
Colour-blind mode
Reduced motion
35 shortcuts
06
Your data stays yours
TaskO runs on your server against your own SQL Server. The browser is only ever allowed to talk back to your own site — the Content-Security-Policy enforces it — so boards, files and comments are never sent to a third party.
The application
From backlog to done.
Every screen below is the running application with its demo data loaded — no mock-ups, no retouching.
Feature list
One workspace, every role.
Members plan and deliver the work. Managers run their boards. Administrators run the installation.
Members · 8 features
Boards and cards
Everything a team needs on the card itself.
- Drag cards between lists, and lists into a new order
- Labels, members, start and due dates on every card
- Checklists, with their progress on the card front
- Attachments with image previews and card covers
- Comments with @mentions and emoji reactions
- Custom fields, votes and watchers
- Reminders and repeating cards
- Mirror cards and links to other cards and boards
Technical details
Clean layers on .NET 10.
One ASP.NET Core project with its layers kept apart: controllers stay thin, services hold the rules, repositories hold every line of SQL.
Architecture
REQUEST → DATAWebScreens, the JSON API behind them, protected downloads
L1
ApplicationBusiness rules, permissions, exports
L2
InfrastructureSQL repositories, automation engine, scheduler, two-step codes
L3
SQL Server35 tables, one schema script and one seed script
L4
One data path, deliberately. Every query is hand-written, parameterised ADO.NET through typed helpers — no ORM between you and the database, so what runs is exactly what you read.
Technology stack
1// TaskO
2Runtime= ".NET 10, C#, ASP.NET Core MVC"
3Data= "SQL Server 2019 or newer, plain ADO.NET"
4Interface= "Razor views and vanilla JavaScript, no build step"
5Sign-in= "Cookie sessions, BCrypt, TOTP two-step"
6Exports= "QuestPDF for PDF; CSV, JSON and ZIP"
7Logging= "Serilog, daily rolling files"
8Hosting= "IIS in-process, or Docker Compose"
9
4 checks · every request
Security
Deny by default: every page and endpoint needs a signed-in user unless it explicitly opts out.
CHECK 01
11Work factor
BCrypt, evenly timed
Work factor 11, and a wrong email takes as long to reject as a wrong password, so accounts cannot be probed.
CHECK 02
6238RFC
Two-step sign-in
RFC 6238 codes set up from a QR code; each code works once, and failed codes count towards the lockout.
CHECK 03
5 / 15Attempts / min
Lockout and sessions
Five failed attempts lock an account for 15 minutes. Changing a password or two-step sign-in, or deactivating someone, ends their other sessions.
CHECK 04
CSPSelf only
CSRF, CSP and uploads
Anti-forgery on every form and API call, a Content-Security-Policy that keeps the page talking only to its own site, and uploads stored outside the web root.
Deployment
Three ways to run it. No front‑end build.
Bring the whole stack up with Docker Compose, publish to IIS on a Windows server, or run it on your own machine. The browser code is plain JavaScript, so there is no npm step anywhere.
$docker compose upDocker
SQL Server and the application come up together; the guide walks through creating the schema, the application login and the demo data.
IIS 10Windows
In-process hosting through the .NET 10 Hosting Bundle, with a step-by-step guide from first publish to redeploying later.
$dotnet runYour own machine
Open the solution and run it against a local SQL Server — the free Express edition is enough.
Runtime.NET 10 — the Hosting Bundle on IIS
DatabaseSQL Server 2019 or newer, Express supported
DockerEngine with Compose, 2 GB of RAM or more for SQL Server
Web serverIIS on Windows, or any Docker host
AI-ready codebase
Extend it with Claude, Codex or Antigravity.
The package ships a CLAUDE.md that maps the solution for an AI coding agent — where each screen lives, how data moves and the rules the code follows. Open the project in the agent of your choice and build on it.
Claude
Codex
Antigravity
Unobfuscated source
CLAUDE.md included
Clear layers
Hand-written SQL
What is included
Complete source. No obfuscation.
SourceThe complete ASP.NET Core 10 solution — every controller, service, repository, view and script. Nothing compiled-only.
Databaseschema.sql creates all 35 tables from scratch; seed.sql loads the demo data; plus a least-privilege login script and a migration.
DocumentationREADME, step-by-step setup for IIS and Docker, CLAUDE.md, a changelog and a full user guide.
Configuration.env.example and appsettings.example.json document every setting, with placeholders only — no real credentials.
Dockerdocker-compose.yml with SQL Server and the application, and a Dockerfile. Use a licensed SQL Server edition in production.
Demo data
10users
2workspaces
10boards
57lists
64cards
120labels
Known limitations
Listed here plainly rather than left for you to find. None of these are presented anywhere on this page as working features.
No email notifications — alerts are in-app
No public API — the JSON API serves the interface
Arabic keeps the left-to-right layout
No real-time co-editing
A scheduled automation can clash with an open board's next save
No automated test project
Run your projects on your own server.
Boards, five views, automation and a full administration area — in one ASP.NET Core 10 solution with source, database scripts, documentation and a Docker stack.
