Releasesby IbisSecurity Center 2.0: Act on vulnerabilities in bulk across all your apps
GA5 months agoUnverifiedAdded Sep 24, 2026
Replit updated its Security Center to allow users to view and remediate vulnerabilities across all projects in bulk. Users can now identify and fix critical CVEs on published projects from a centralized dashboard.
Topics: Security, Developer tools
More Replit releases
Every Replit releaseSecure more apps with External Access Tokens and Private Publishing
Replit has made Private Publishing available to Core and Starter plan users and introduced External Access Tokens for all private apps. These features allow secure access to private deployments without exposing them to the public internet.
Introducing Replit App Monitoring
Replit introduced App Monitoring for published apps, which notifies users via email if their application goes down. The Replit Agent can also be used to analyze logs and database state to identify the root cause of failures.
Replit Enterprise, Now Self-Serve
Replit Enterprise is now available for direct purchase through the website. Organizations can configure SSO and SCIM and provision accounts without needing to go through a sales demo or contract negotiation.
Introducing Replit Auto-Protect
Replit Auto-Protect automatically monitors project dependencies for critical CVEs. When a vulnerability is found, the Replit Agent prepares a patch that users can apply and republish with two clicks.
Meet Replit Security Agent
Replit Security Agent performs comprehensive security reviews of codebases using a hybrid approach with Semgrep and HoundDog.ai. It automates threat modeling and vulnerability identification before projects are published.
Unlocking a New Way to Build Enterprise Data Apps with Microsoft Fabric
Replit and Microsoft have collaborated to allow developers to build AI-powered applications in Replit and deploy them directly into Microsoft Fabric with enterprise governance.
Meet Replit SEO Agent
Replit has introduced an SEO Agent that scans applications for discoverability issues and provides automated fixes, alongside improved default SEO metadata for new apps.
Build a custom Shopify storefront on Replit
Replit Agent can now generate custom Shopify storefronts, provision Shopify accounts, and manage commerce infrastructure through natural language prompts.
Also shipped on May 7, 2026
Replit in May 2026Consistent Web Search and Fetch Across Every Model
OpenRouter now enables tool-calling models to perform web searches and fetch page content. Users can choose from multiple search and fetch engines to integrate these capabilities into their workflows.
Prisma 8: A Call for Extension Authors
Prisma 8 features a modular core that allows developers to build and integrate extensions for specific databases, vector search, and JSON-with-schema.
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Monitors & Alerts , Now Generally Available
We’ve updated how you build alerts - separated now into Monitors and Alerts - to give you more control over what you track and how your team gets notified.
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel...
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel files, both in the MotherDuck UI and in embedded Dives . Wire up exports from your Dive code with the new exportAs and useExport hooks from @motherduck/react-sql-query .
Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
Multiple security vulnerabilities were disclosed by the React team and Vercel affecting React Server Components and Next.js. These include denial of service, middleware and proxy bypass, server-side request forgery, cross-site scripting, and cache poisoning issues across a range of severity levels.