Image: Replit
Why it mattersA security team that could not approve a hosted agent can now put the whole Replit stack behind its own cloud boundary, with its own encryption keys.
A security team that said no to a hosted coding agent now has three ways to say yes without the data leaving its own cloud. Replit has announced Bring Your Own Cloud for enterprise customers, with three tiers that cover the platform, the published app, or just the exported build.
Writing on the Replit blog on 16 October, the Replit Team describes the three options and names Microsoft Azure, Google Cloud and Amazon Web Services as the supported clouds. Each option gives a different split of responsibility between Replit and the customer's own infrastructure team.
The three tiers
Full BYOC runs the whole Replit platform and the published projects inside the customer's own cloud tenant. Replit says this includes compute, storage, the file system, integrations and the Agent harness, grouped into isolated units it calls cells. The security team can govern which internal resources the agent reaches and apply controls to outbound connections, and the agent harness sits next to the compute it uses so there is no network hop between them. Replit says Full BYOC is in private preview for enterprise customers.
BYOC for Published Apps keeps the Replit platform on Replit's side but puts the published projects in the customer's cloud. For the person who hits Publish, nothing changes. For a production app, this means it can reach private databases inside the customer environment, every piece of backing infrastructure can be set to private endpoints, and the security team can inspect the workloads with its own tools. Replit uses infrastructure as code to publish and manage the resources, and connects the two sides over tunnels encrypted at two layers. Customer-managed encryption keys are available with an agreement that includes physical isolation of the Replit cell. This tier is in early access.
Image Exports ship a Docker image, a Terraform file and a software bill of materials. The customer's infrastructure team deploys the app on its own and Replit does not call back out to its platform afterwards. Replit says this fits customers whose environments are restricted enough that the usual Replit experience is not a fit. The team then provides the pieces Replit normally gives, including managed auth and connectors.
What the pricing and dates say
Replit does not post a price on any of the three tiers and does not give a general availability date for Full BYOC or BYOC for Published Apps. Both ship through sales. The post says Replit's cellular architecture is what makes all three possible and that the Agent can be customised with Skills and Projects on each tier.
For a team shopping an AI coding platform under a security review, the useful line is that Replit now sells against the no that most enterprise security teams give to hosted agents. Weigh Image Exports against building the app on your own stack with the agent of your choice, because the operational burden of Image Exports is the same either way.
Source
Bring Your Own Cloud to Replit, Replit Team on the Replit blog.
This item was written by an AI system from the linked source. Reveneau is responsible for what it publishes.
Get AI News in your inbox
New developer tools, model and agent releases, and how teams are actually using them to release software. Short, and only when there is something worth reading.
