VP of Engineering @Replit | Always hiring great people: https://teapaw.org/t.co/aRv9pxW0z5
Bay Area
Joined November 2009
- Tweets1.1K
- Following401
- Followers2.1K
- Likes5.7K
Pinned Tweet
I've worked on engineering productivity in some way for 20 years.
I have never seen a curve bend like this before. Not even close.
microVMs, another way we're making Replit more secure.
The whole blog is interesting, but I'm proud of the extra care the team put into the section on security and isolation.
Not a moment too soon, as it turned out.
how does @Replit ensure that all your data is secured at runtime and avoid _most_ Linux kernel vulnerabilities? join @jasondellaluce, @prydonius, @cgbrewster, and me for the first part of the story of how we went Linux Containers -> MicroVMs: frontier.replit.com/sandbox-…
The way endpoints are managed wasn't designed for this. The cloud was.
The only sensible choice is to run AI Agents in a cloud environment.
AI agents running on employee endpoints are becoming a systemic security risk for enterprises & governments.
Some are responding by restricting tools like Claude Code, as Goldman Sachs reportedly has.
In this security advisory, we outline the risks and recommend a path forward.
1
10
581
When I first arrived at Replit almost 5 years ago, my top personal goal was to make it so that we could honestly build Replit on Replit.
Anybody who worked here in that time will remember me pushing. But we never quite succeeded. IDE habits were hard to break.
Until AI...
An agent investigating an issue may need to read code, inspect o11y tools, and prepare a fix. Each step raises questions about access.
Who started the work? Which systems can the agent access? What can it modify?
Our latest security blog explains how Replit helps teams answer those questions and enforce the answers.
Read more: replit.com/blog/architecture…
Letting anybody build an app was just the start. In a self driving company, every employee needs general coding capability.
But it's painful: dev env setup, getting access securely, verifying changes, telling a good PR from slop.
We evolved Replit to solve those challenges.
Now anyone can now bring their ideas into the company codebase on Replit.
Replit Cloud Agents can turn natural language into a tested pull request, and engineers still approve the final code before it ships.
Our own design team used Replit to safely ship over 250k lines of code in the last 6 months, reviewed and approved by engineers.
replit.com/blog/anyone-can-b…
It started with transforming how we work. Now to bring it to everybody. Stay tuned for more...
We believe by the end of 2030, every Fortune 500 will be a Self-Driving Company.
That doesn’t mean AI replaces people.
It means people remain in the driver's seat leading judgment, creativity and taste, while agents fuel execution.
This is the Self-Driving Company.
replit.com/blog/rise-of-self…
2
27
740
The new trend of security vulnerability acceleration is only going to continue.
Read how we worked the past two days to mitigate, patch, and defend users.
The only path forward is proactive defensive measures that use AI. It's a big area of investment, more to share soon.
Recent vulnerabilities in widely used third-party software have created risks for businesses across the internet.
We have patched infrastructure, updated language tooling, and blocked exploits to protect your apps. We’ve applied fixes automatically wherever we can. Where you need to republish, we’re notifying you with clear instructions.
Read more on our blog: replit.com/blog/security-vul…
Scott Kennedy ⠕ retweeted
You now have an on-call engineer right in your pocket.
Meet Monitoring Agent.
Replit Monitoring Agent can see, fix, and deploy changes autonomously for AI-app builders.
Create your own apps, without the headaches of managing fixes.
Learn more: replit.com/blog/replit-monit…
Agents can do surprising things. That's why we engineer our environment to have multiple layers of protection and data safety.
And yet, it still feels like we're only getting started. Lots of work to do, will be sharing more soon.
We want Replit to be the most secure places to run your Agents and Apps.
That's why we let you put it all in your Cloud under your governance and network policies.
The apps, sandboxes, credentials, and agent harness all under your control.
We’re introducing Bring Your Own Cloud (BYOC) for Replit, with options for development and production in your cloud, whether you use @Azure, @GoogleCloud, or @AWScloud.
Our approach gives security and platform teams greater isolation and control while preserving the familiar Replit experience.
Explore BYOC: replit.com/blog/bring-your-o…
I still remember the day Michele (aka pirroh@) became a full time member of Replit instead of just an advisor. Or, in his words: "stopped just yapping and came to get things done".
Game changing since day 1. Awesome to watch you do your thing @pirroh.
Scott Kennedy ⠕ retweeted
You can access OpenAI models on Replit for free.
Our router also makes high-end models incredibly cost-efficient.
If you’re a business looking for an independent, multi-model alternative to Cursor, we’d be happy to fund your transition.
We’re ending our partnership with Cursor following its acquisition by SpaceX. Under our proposal, Cursor’s direct access to our models would end on November 12.
We know that the people most affected by this decision are the developers who rely on OpenAI models in Cursor. We care about their experience in this transition and we’re ready to go above and beyond to support them.
openai.com/index/our-decisio…
App building is about more than just building an app.
Meet your new AI growth engineer.
You’ve come up with the idea. You’ve built the product, faster than ever, with Agent.
Replit’s Growth Skills gets your product into the hands of those who need it. Our expert partners make growth more accessible, even if you don’t know where to start.
Start today in Replit with:
@ZoomInfo
@useapolloio
@Clay_GTM
@Sideshift_app
@RevenueCat
@Stripe
@PostHog
Turn that idea into a real business overnight at replit.com/growth-kit.
1
10
419
Instead of expecting every employee to choose the correct model for a given task, let Replit do it for them.
Less token spend, same outcomes.
This is the way.
I have only put one motivational message on my desk for the past 16 years.
I take no credit for it, it was a sticker I got a tech event in 2010 for a defunct startup.
I’ve turned it into a 3d print last year and have a few laying around the house to remind myself that no meeting matters, no planning doc matters. All that matters is the feedback you get from shipping so you can ship again. 🚢
3
276