From the source
In addition to features like Security Agent and Auto Protect, you can restrict access to your apps with Private Publishing.
Private Publishing is ideal for apps that should only be accessible to a specific set of users — whether that’s a personal tool, an internal app for teammates, or an early prototype shared with close collaborators.
Today, we’re introducing two updates that expand secure access for Replit builders: Private Publishing is now available to Core and Starter plan users.
Previously, private deployments were limited to Pro and Enterprise plans.
External Access Tokens are now available for all private apps.
External Access Tokens let trusted external services securely access private apps without exposing the entire application to the public internet.
Private Publishing works at the network level.
When publishing, simply choose your desired access level and Replit will prevent unauthorized user requests from ever reaching your app.
…
