Replit security grade
Replit scored a 76/100 (B+) on an independent trust and security analysis — a useful data point if you use Replit for automations or side‑hustle coding (Nerq). (nerq.ai) If you're weighing alternatives, there's also a current guide comparing CodeSandbox competitors to help pick a safer platform for production work (SaaSworthy). (saasworthy.com)
Nerq calculates its Trust Score from five weighted pillars: Security 30%, Compliance 25%, Maintenance 20%, Popularity 15% and Ecosystem 10% (nerq.ai — ). The Nerq index refreshes on a rolling basis (data updated hourly in some reports) and publishes live statistics for millions of AI assets and agent entries. (nerq.ai — ). Replit's public security feature set lists pre-deployment scanning, single‑sign‑on (SSO), private deployments, and role‑based access control as enterprise controls. (replit.com — ). Replit documentation states the company has achieved SOC 2 Type II attestation and implements encryption across data in transit and at rest. (docs.replit.com — ). Independent scans have varied: an off‑site report gave replit.dev a 66/100 security readiness score (Moderate Risk), while Nerq’s index shows several Replit‑hosted spaces and models with trust scores in the low‑50s flagged as limited risk. (guard.offseq.com — ) (nerq.ai — ). Marketplace guides list multiple CodeSandbox alternatives for production workflows — SaaSworthy’s 2026 alternatives roundup names ten competitors and comparison entries (including Gitpod, StackBlitz, Glitch and others) for side‑by‑side evaluation. (saasworthy.com — ). Nerq’s ecosystem vulnerability report found 81% of the scanned popular repositories had no security CI, a metric that platforms’ private‑deployment and CI integrations aim to address when assessing production readiness. (nerq.ai — ).
