Replit Details Agent Habitat Architecture for Secure AI Agent Work

• Replit describes Agent Habitat, a security infrastructure designed to scale security alongside agent autonomy under the 'Self-Driving Company' vision.
• Internal data shows a 2.9x increase in code output for a consistent engineering cohort from January to June 2026, with no change in review delays, PR rejection rates, or incidents.
• The system uses MicroVMs with minimal kernels to isolate workloads, preventing exploitation of recent Linux kernel vulnerabilities without requiring customer action.
• A credential broker keeps secrets outside the agent context, retrieving them only after approval to reduce exposure risks in generated code and logs.

Security & Isolation

• Auto-Protect automatically prepares and tests patches for project dependencies matching new vulnerabilities.
• Security Center allows administrators to prioritize remediation based on severity and exposure.
• Replit runs hundreds of AI red-team agents 24/7 to identify, verify, and attempt exploitation of vulnerabilities.

Governance & Data Control

• Enterprise governance includes SAML SSO, SCIM provisioning, and role-based access control synchronized with Identity Providers.
• Data is encrypted with TLS 1.2+ in transit and AES-256 at rest; single-tenant customers can use Customer Managed Encryption Keys (CMEK).
• Bring Your Own Cloud (BYOC) allows deploying agent harnesses and sandboxes within the enterprise's own cloud tenant for existing governance compliance.