Releasesby IbisSecure more apps with External Access Tokens and Private Publishing
GA5 months agoUnverifiedAdded Sep 24, 2026
Replit has made Private Publishing available to Core and Starter plan users and introduced External Access Tokens for all private apps. These features allow secure access to private deployments without exposing them to the public internet.
Topics: Security, Developer tools
More Replit releases
Every Replit releaseSecurity Center 2.0: Act on vulnerabilities in bulk across all your apps
Replit updated its Security Center to allow users to view and remediate vulnerabilities across all projects in bulk. Users can now identify and fix critical CVEs on published projects from a centralized dashboard.
Introducing Replit App Monitoring
Replit introduced App Monitoring for published apps, which notifies users via email if their application goes down. The Replit Agent can also be used to analyze logs and database state to identify the root cause of failures.
Introducing Replit Auto-Protect
Replit Auto-Protect automatically monitors project dependencies for critical CVEs. When a vulnerability is found, the Replit Agent prepares a patch that users can apply and republish with two clicks.
Replit Enterprise, Now Self-Serve
Replit Enterprise is now available for direct purchase through the website. Organizations can configure SSO and SCIM and provision accounts without needing to go through a sales demo or contract negotiation.
Meet Replit Security Agent
Replit Security Agent performs comprehensive security reviews of codebases using a hybrid approach with Semgrep and HoundDog.ai. It automates threat modeling and vulnerability identification before projects are published.
Unlocking a New Way to Build Enterprise Data Apps with Microsoft Fabric
Replit and Microsoft have collaborated to allow developers to build AI-powered applications in Replit and deploy them directly into Microsoft Fabric with enterprise governance.
Meet Replit SEO Agent
Replit has introduced an SEO Agent that scans applications for discoverability issues and provides automated fixes, alongside improved default SEO metadata for new apps.
Beyond the App: Using Vibe Coding to Ship Decks, Dashboards, and Launch Assets
Replit Agent 4 now supports the generation of stakeholder decks, live dashboards, and animations directly from existing projects. This allows product managers to create launch assets and project documentation without switching between disconnected tools.
Also shipped on May 6, 2026
Replit in May 2026Introducing @supabase/server
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Data migrations in Prisma 8
Prisma 8 allows developers to write data migrations in TypeScript, enabling column backfilling and data transformation alongside schema changes.
Introducing Create-Prisma: Start a Prisma App With One Command
The new create-prisma CLI tool allows developers to initialize a Prisma application with a single command. It includes a starter schema, seed data, database scripts, and optional Prisma Postgres setup.
Prefect 3.7: infrastructure decorators and plugins are GA
Two of our most-requested experimental surfaces graduate to general availability, flows can render their own dependency graphs, and prepared workspaces now run with uv.
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
Auth for MCP is now Generally Available
We are excited to announce Auth for MCP is now Generally Available. Auth for MCP gives you a straightforward way to add authentication and authorization to any MCP server, so you control exactly who gets access, and what they get access to. Implement authentication, CIMD registration, and OBO token exchange for AI agents.