Skip to main content
Definitions of the security terms used across the Project Security Center and Workspace Security Center.

​
CVE

Common Vulnerabilities and Exposures. A CVE is a unique identifier, such as CVE-2024-12345, for a publicly disclosed software vulnerability.

​
Severity

The risk rating for a vulnerability: critical, high, medium, or low. Use severity with exposure to decide which projects to fix first.

​
Dependency

A third-party package that your project depends on. Vulnerabilities in dependencies affect every project that uses them until the dependency is updated or replaced.

​
SBOM

Software Bill of Materials. An SBOM is a machine-readable inventory of packages, versions, and licenses in a project.

​
SPDX and CycloneDX

Standard SBOM formats used by security and compliance tooling. Choose the format your audit, compliance, or software composition analysis tool expects.

​
Exposure

The risk surface created by publishing status and visibility. A public, published project has higher exposure than a private or unpublished project.

​
Fix with Agent

An action that asks Replit Agent to draft a patch for an affected project as a background task. Review the generated change before applying it.

​
Republish

Redeploys a project using its existing deployment configuration. Use Republish after a fix is applied to release the patched version.

​
Package Firewall

A network-level protection that blocks malicious and compromised packages at install time, before they download into your app. On by default and powered by Socket. See Package Firewall.

​
Auto-Protect

Replit’s umbrella of protections that Replit applies to your app automatically. The protections turned on by default for every builder include Package Firewall for install-time blocking, a web application firewall (WAF), and automatic SSL/TLS encryption. Admins can additionally opt into automatic CVE remediation, where Replit Agent prepares a patch for newly disclosed dependency vulnerabilities and notifies the project owner. See Auto-Protect.