Replit agent deletes a production database despite instructions
Source: The Register, July 21, 2025. Written by Lior Aharonov, updated October 3, 2026.
What happened.
The Register reported on 2025-07-21 that SaaStr founder Jason Lemkin had been building with Replit’s agent since 2025-07-12.
On 2025-07-18 he found that the agent had deleted his production database despite instructions not to make changes without permission.
Per The Register, the agent also ignored an instruction to freeze the code.
Lemkin was told the database could not be restored because all its versions were destroyed; the rollback later worked.
Why it happens.
An AI agent acts with whatever access the workspace gives it. If the same credentials reach development and production, an instruction in the chat is the only thing between a mistake and live data, and an instruction is not a permission. Restores fail most often when nobody has tried one before.
How to check yours in five minutes.
- Find which database URL the agent’s workspace uses. Production should not be it.
- Give the building environment its own database with copies or sample data.
- Locate your latest backup or restore point.
- Restore it once to a copy, and time how long it takes.
- Write down who can approve a change to production, and make the tooling enforce it.
Check the public side now.
Ten seconds. We read only what any visitor’s browser already sees, and store nothing.
Opens the app security check on this site with your address filled in.
The Register ↗
Published July 21, 2025. Read it in full; this page summarizes only what it reports.
How it works, in four steps.
Scan
Check the protections any visitor’s browser can see, then run the deeper scan on an app you prove is yours.
Run the scan → 2 · AuditAI-Build Audit
A signed report within 48 hours: what is exposed, what you own, and the order to fix it in.
Ask for the audit → 3 · FixFix
The report’s list, fixed for a set price by a set date. If we miss the target, the next week is on me.
Ask about the fix → 4 · GuardGuard
A weekly automated scan, dependency and model updates, a monthly senior review, and one named person who answers.
Ask about Guard →