Blog
Govern Replit at scaleNew Enterprise Governance tools for Replit

Published:
Aug 16, 2026Updated:
Aug 18, 2026The Replit Team
New Admin API, Audit Logs, and Workspace Settings give organizations more insight and flexibility into how they adopt AI with Replit.
Replit helps teams turn ideas into working software quickly. Most companies start with a handful of builders and a few prototypes. Then it works, and it spreads: more teams, more projects, more software running in production.
That shift creates work for a specific group of people. As AI tools spread across a company: IT, procurement, and admin teams absorb the cost. They field permission requests, run access reviews, make policy decisions tool by tool, and answer questions about what is running where. The requests pile up faster than those teams can grow.
We’re announcing a set of updates that are available today and will continuously be updated in the coming weeks. These updates are aimed at supporting enterprise adoption of AI, built to take that work off admins' plates:
- Comprehensive Audit Logs: More than 50 events across deployments, identity, secrets, and agent activity, with native streaming to your SIEM. Available today.
- Admin API: Pull usage, workspace, member, and project data into the tools your teams already run. Beta available today.
- Workspace Settings: One policy baseline for the whole company, with approved exceptions for the teams that need them. First setting will be available end of the week.
- Compliance API: fetch the full contents of user messages for auditing & compliance. Available end of August.
The questions every administrator needs answered
As adoption grows, the questions become practical:
- Observability: Who changed a setting or published a deployment?
- Security & controls: Can we keep a company-wide policy while giving one approved team the flexibility it needs?
- Manage accounts at scale: How do we programmatically manage all our Replit accounts?
These updates are designed to help teams answer those questions without putting a manual review step in front of every user.
Comprehensive Audit Logs: see what happened
Comprehensive Audit Logs adds more than 50 new events across deployments, access and identity, workspace administration, project activity, secrets, connectors, domains, and agent activity.
That gives security and compliance teams a clearer trail when they need to investigate a change or prepare for a review.

Audit logs that work with your existing tooling
Replit audit events can stream to your SIEM.
What is supported today:
- Datadog
- Splunk
- Amazon S3
- Generic HTTP endpoint/webhook
Admins can view, filter, and bulk-export audit events.
Audit log retention is 30 days by default. Contact Replit to discuss longer retention requirements.
Workspace Settings: set a baseline without blocking every team
Teams work differently, and an open source model that's approved for an internal prototype may be off the table for a team handling customer data. When the only option is all or nothing, admins either approve the broadest set of models for everyone or spend the week fielding exception requests.
Workspace Settings gives account admins three choices for each policy control, and they can be mixed across the organization:
- Set it once for everyone. Apply the value org-wide and lock it.
- Approve a different value for one workspace. The exception is explicit and stays visible to you.
- Delegate the setting to the workspace admin. That team manages it themselves, within the controls you've opened up.
The first Workspace Setting we’re launching will allow enterprise administrators to:
- Opt in to using open source models, depending on company policy.
- Configure which model providers are used by the Replit Agent.
- Configure which individual models are allowed in each workspace for compliance and cost control.
We will continue adding more workspace settings to give administrators finer controls to ensure safe and compliant usage of Replit across the organization.

The Admin API: manage accounts at scale
The Replit Admin API lets you pull workspace, member, project, and usage data into new Replit projects and the tools you already use: dashboards, Slack, Datadog, finance reports, etc…
For example an admin who wants spend broken out by Replit workspace can build the report in Replit, point it to the admin API, and get the analysis done that day.
The Replit Admin API is in beta in this first release, with 5 endpoints for getting usage data, workspaces & IDs, account members and projects. More updates will come to enable admins to programmatically manage Replit.

How to get started:
What’s live:
The Admin API beta is live for all Enterprise customers. Create your Account API key in Settings→Developer→Create API Key.
To enable Audit Logs in Settings→Advanced→Audit Logs.
Coming soon:
For Workspace Settings go to Account Settings→ Advanced section→ Agent Modes and model providers (end of the week)
Compliance API: fetch the full contents of user messages for auditing & compliance (available end of August).
If you have additional questions on how Replit is helping enterprises become AI native, contact our enterprise sales team
More
Sep 10, 2026Databricks Integration is Now Available with Native Lakebase Support
The Replit | Databricks integration gives enterprise teams a faster path to utilizing governed data for production-ready applications. Today, we’re excited to announce the integration is generally available alongside a new capability: native Databricks Lakebase support. This builds on the foundation introduced from our public preview announcement this past June. The result is one seamless path from idea to production: Replit accelerates application creation, while Databricks hosts and provides governed access and security to live enterprise data. Through Lakebase, Databricks also delivers a managed database for storing and updating application data. With native Lakebase support, teams can build full-stack, context-rich apps that combine live Databricks warehouse data with information created and updated through the app. When an app built with Replit is ready to deploy, Replit Agent automatically provisions its Lakebase database, eliminating the need for manual setup. New Capabilities for a Faster, Safer Launch Automated Preview Deploys: Test your apps before they go live. Replit automatically creates a separate preview environment that keeps test data isolated from live business data in Databricks, giving teams a safe place to build, review changes, and make adjustments.
Aug 17, 2026Black-box pen tests on Replit
See how Replit's new black-box pen testing simulates real attacks to find vulnerabilities hidden from code-only scans.
Apr 20, 2026Defense in Depth: How Replit Secures Every Layer of the Vibe Coding Stack
Defense in Depth: How Replit Secures Every Layer of the Vibe Coding Stack Vibe coding is changing how software gets built. But as AI agents write more of our code, the question security teams are asking has shifted from "Can AI build this?" to "Can I trust what AI builds?". At Replit, we believe the answer has to be yes, not through blind faith, but through architecture. Every layer of the Replit infrastructure where customer code runs, from the development sandbox to the production deployment, is designed with defense in depth. The Replit platform itself, our control plane, is also implemented with these principles in mind. No single control is the last line of defense. Every layer assumes the one above it might fail. This post is a detailed walkthrough of how we think about security across the stack, written for the people who need to evaluate it: CISOs, security engineers, and teams considering Replit for production workloads. Zero Trust as a Foundation Replit adheres to Zero Trust Architecture principles across our internal infrastructure. Concretely, that means: