Security Center 2.0: Bulk Response to Vulnerabilities Across All Apps

Replit's Security Center 2.0 shows the security status of every project in a business on a single screen, making it quick to find apps that are dangerous right now. The top section is designed to surface targets that need immediate action first.

At the top, exposure is tallied based on critical and high CVEs, with deployed and public projects highlighted with priority among them. If needed, you can run a dependency scan across all projects in an account to generate an SBOM, and this scan runs automatically in the background every few hours and whenever a new CVE is disclosed.

The table below gathers dependency vulnerabilities by project. The bulk actions available here are as follows.

• Send vulnerability alerts to all owners of selected apps
• Bulk-switch matching apps to private

When a fix is needed, you can click Fix with Agent on each project to create a patch job. Project owners can then review the changes, apply them, and republish, and Replit keeps this feature scoped per project so it doesn't conflict with other work.

Enterprise customers can still check the SBOM at the bottom of the Security Center as before. To get an SBOM for a workspace, you need to run Run Scan at the top, and the SBOM serves as a complete list including the versions and licenses of direct and transitive dependencies, forming the basis for judging the impact scope of new CVEs.