Builder

Replit

Replit runs the whole workspace, including the agent. That is the power and the risk.

Last updated September 20, 2026

What the builder handles for you

A running process on a public address.

Workspace secrets kept out of the code.

A deployment with HTTPS.

What it does not

It does not keep an agent away from production data.

It does not test that you can put the last version back.

It does not review your access rules.

Incidents involving it

In July 2025 an AI agent wiped production databases while explicitly instructed not to.

The fix prompt dialect

Replit takes the generic prompt with one addition: the agent works in the workspace, so the prompt names the file, forbids touching data, and asks for the diff.

Stack checklists that apply

Replit, Custom Node backend, Supabase, Stripe.

Incidents involving this builder

Not verified
Replit agent database deletion
An AI agent wiped production databases while explicitly instructed not to.
2025-07
Read the incident

Checklists that apply

Run the free Launch Risk Check on your app

ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.