The ordering thing is harder and currently we don't do it. Per-tool permissions at best ban a combination, they can't say "internet then Slack is ok, the reverse isn't." DeepMind's CaMeL paper (arxiv.org/abs/2503.18813) is the best take I know on this, it tracks data flow between tool calls and enforces policy there. Still an open problem as far as I can tell.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:49:34.000Z","created_at_i":1785426574,"id":49111697,"options":[],"parent_id":49110691,"points":null,"story_id":49109721,"text":"I am currently building something similar for my company. We are enabling people to host apps with python backends as well, so that people can do more complex tweaking of data for scientific workflows. The out-of-box solutions keep users constrained to an environment that doesn't allow things like importing weird packages on the back and front end for custom apps. The security implications are challenging, but I can mostly just keep the apps hosted in a highly constrained environment.
Separately I haven't yet seen a great security governance model for LLM integrations. At an enterprise level I'd like to govern rules such that, for example, if someone gives an LLM access PII information or proprietary data, then it shouldn't have access to a slack integration or the internet. Controlling this at the employee or team level doesn't make sense, as an employee may have reason to make separate use of both. From a security perspective I want them to be able use LLMs with different types of acccess, but not necessarily the same agent at the same time. Furthermore, they could ideally chain together agents with different permissions in specific orders. For example they could have a workflow where an agent can reach out to the internet, and then have a separate one that can read/write to slack, and then have a third that can interact with PII data. If they tried to wire together agents in the opposite order, it should get denied.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T14:38:37.000Z","created_at_i":1785422317,"id":49110691,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Awesome launch and good pricing. We built an equivalent version in our org that takes HTML/JSX files and stores/serves them like an S3 bucket would. Works fabulous and we considered turning it into a SaaS product, met a real need in our org. Wishing you guys the very best of luck!!","title":null,"type":"comment","url":null},{"author":"rgbrgb","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T15:18:21.000Z","created_at_i":1785424701,"id":49111260,"options":[],"parent_id":49110723,"points":null,"story_id":49109721,"text":"Today it's GPT-5.6 Luna sitting inline on the egress broker, with Terra re-judging anything Luna flags as ambiguous. We are still experimenting though.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T14:40:10.000Z","created_at_i":1785422410,"id":49110723,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Very cool. What model is used for the judge? We use setoku for Claude-built internal tooling but the design doesn\u2019t allow writes so that there\u2019s no inference cost on the server. Having the judge check for danger is a neat design.","title":null,"type":"comment","url":null},{"author":"dchuk","children":[{"author":"hudsongr","children":[],"created_at":"2026-07-30T15:16:47.000Z","created_at_i":1785424607,"id":49111249,"options":[],"parent_id":49110868,"points":null,"story_id":49109721,"text":"Thanks! We've actually have been experimenting with the config generation approach as well. One tradeoff we noticed was it turns the system into more of an app builder where the ceiling of what you can do is lower compared to a coding agent. But it's much faster than codegen. How dynamic have you found Lowdefy compared to codegen?","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T14:49:36.000Z","created_at_i":1785422976,"id":49110868,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"I\u2019m playing with this exact concept but going down the path of a Claude code plugin that is optimized for configuring lowdefy apps because of that framework\u2019s unique approach where you don\u2019t write code you generate yaml configs that then drive the rendering of an app. So far it\u2019s working pretty well, still pressure testing it. The audit control and permissions management you have is great, especially around the connectors. Nice job!","title":null,"type":"comment","url":null},{"author":"inflam52","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T22:05:06.000Z","created_at_i":1785449106,"id":49116467,"options":[],"parent_id":49111174,"points":null,"story_id":49109721,"text":"Closest comp. I'd argue the "AI builds the app part" is fast becoming table stakes. The unsolved problem is what happens after the app exists and that's what we actually built. Anyone in the org can fork a coworker's tool and rebind it to their own data scope. Enforcement also happens at a different layer. From what we've gathered, Superblocks controls who can run an app and bakes guardrails in when the app is generated, but every app still queries through a shared database credential. On our side, each tool gets its own database role that can only see its own data, and credentials live in a proxy the code never touches. So even when the AI writes bad code, it can't reach anything it shouldn't.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:10:24.000Z","created_at_i":1785424224,"id":49111174,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Seems like Superblocks","title":null,"type":"comment","url":null},{"author":"jedberg","children":[{"author":"big_hacker","children":[{"author":"jedberg","children":[],"created_at":"2026-07-30T15:29:10.000Z","created_at_i":1785425350,"id":49111387,"options":[],"parent_id":49111329,"points":null,"story_id":49109721,"text":"So is retool. :)","title":null,"type":"comment","url":null},{"author":"teej","children":[],"created_at":"2026-07-30T15:29:35.000Z","created_at_i":1785425375,"id":49111397,"options":[],"parent_id":49111329,"points":null,"story_id":49109721,"text":"https://www.ycombinator.com/companies/retool","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:24:29.000Z","created_at_i":1785425069,"id":49111329,"options":[],"parent_id":49111220,"points":null,"story_id":49109721,"text":"It's funded by YC!","title":null,"type":"comment","url":null},{"author":"themanmaran","children":[{"author":"jedberg","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T22:29:04.000Z","created_at_i":1785450544,"id":49116687,"options":[],"parent_id":49112494,"points":null,"story_id":49109721,"text":"The difference is Retool still basically trusts whoever (or whatever) is building the app, we don't. The agent writing the code never sees a credential and each tool gets its own Postgres role. Even if it generates something dumb it physically can't touch data outside its scope.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T16:45:54.000Z","created_at_i":1785429954,"id":49112494,"options":[],"parent_id":49112434,"points":null,"story_id":49109721,"text":"Have you looked at their latest product? You describe your app in a text box and the AI builds it, with all the enterprise goodies like RBAC baked in.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T16:41:36.000Z","created_at_i":1785429696,"id":49112434,"options":[],"parent_id":49111220,"points":null,"story_id":49109721,"text":"TBH I was a retool power user for years, but I feel like they completely missed the vibe code train.
It's so much more annoying to go drag boxes around and type out little JS snippits in every chart as opposed to just telling claude to make the chart.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:14:25.000Z","created_at_i":1785424465,"id":49111220,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"How does this differ from retool?","title":null,"type":"comment","url":null},{"author":"Bnjoroge","children":[{"author":"hudsongr","children":[],"created_at":"2026-07-30T16:47:41.000Z","created_at_i":1785430061,"id":49112522,"options":[],"parent_id":49111390,"points":null,"story_id":49109721,"text":"Thank you! Yes, you can share it externally if it isn't connected to external data sources.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:29:24.000Z","created_at_i":1785425364,"id":49111390,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Demo looks cool, congrats on the ship! Probably missed but is it possible to externally share/view the built artifact outside of prized?","title":null,"type":"comment","url":null},{"author":"christoff12","children":[{"author":"hudsongr","children":[],"created_at":"2026-07-30T17:07:44.000Z","created_at_i":1785431264,"id":49112766,"options":[],"parent_id":49111784,"points":null,"story_id":49109721,"text":"Yes, we support Snowflake and ClickHouse today. And we're happy to integrate more, just say the word :)","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T15:54:44.000Z","created_at_i":1785426884,"id":49111784,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"I like this a lot. Do you handle scenarios where the data and context live in a data warehouse (Snowflake, etc)?
There are a lot of operational needs that exist downstream from dbt models that combine data from the various source systems.","title":null,"type":"comment","url":null},{"author":"warthog","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T19:44:41.000Z","created_at_i":1785440681,"id":49114794,"options":[],"parent_id":49112833,"points":null,"story_id":49109721,"text":"Thanks for the feedback. From what we've gathered so far, non-eng are using CC or Codex to build one-off internal tools, but they're deploying them on their personal Vercel accounts and sending the url over Slack. That's the workflow we want to replace with a reasonable level of security and auditability. We're still trying to gauge interest in using the CLI to build and having everything deploy on Prized, we're working out whether that's valuable.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T17:13:21.000Z","created_at_i":1785431601,"id":49112833,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"I did build a very similar product putting emphasis on integrations and security. It was tough to churn anyone out from Replit, Lovable and then CC and Codex.
When I talked to Lovable team, they told me Lovable is used primarily for prototyping, not internal tools and they are having a rough time trying to change the use case.
Hope my experience helps!","title":null,"type":"comment","url":null},{"author":"aliclark","children":[],"created_at":"2026-07-30T17:17:22.000Z","created_at_i":1785431842,"id":49112886,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Me and my co-founder are building something similar but it started out as a tool to help build Lovable style prototypes for your existing product. Think Product Managers building an idea without having to figure out how to install git, VS Code, 17 other tools and then try share a URL.
Initial talks with customers resonated more with the internal tooling idea though. It's flexible enough to support both.
We're earlier along than this product though so there's a fair few wrinkles in our product.
https://flexenv.com/","title":null,"type":"comment","url":null},{"author":"blyry","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T22:35:34.000Z","created_at_i":1785450934,"id":49116737,"options":[],"parent_id":49112979,"points":null,"story_id":49109721,"text":"Thanks! The private endpoint tip is very much on point. We've already hit two prospects where the blocker was that they don't want full self-host but their security groups won't take generic cloud egress. It's on the list.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T17:24:57.000Z","created_at_i":1785432297,"id":49112979,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"nice this is awesome, what i've been building internally for a while now. lovable-esque internal platform with an agentic chat building experience, preview window, our internal auth, internal standards, sandboxed agent devcontainers on k8s. Even down to the shared experience -- these are shared tools for everbody, team ownership structure, not individual. easily forkable, auto-genned product docs etc etc. Hope you can monetize it! Look into private endpoint connectivity for big corps that need the internal access but don't want to self host.","title":null,"type":"comment","url":null},{"author":"bitlad","children":[{"author":"marinoseliades","children":[{"author":"bitlad","children":[],"created_at":"2026-07-31T02:52:15.000Z","created_at_i":1785466335,"id":49118466,"options":[],"parent_id":49116767,"points":null,"story_id":49109721,"text":"This is not the most effective way to build trust layer. But anyways.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T22:38:37.000Z","created_at_i":1785451117,"id":49116767,"options":[],"parent_id":49113276,"points":null,"story_id":49109721,"text":"Fair, the generation part is commoditized. What we sell is the trust layer around company data. No credentials in the builder's hands, scoped access per tool, forkability etc. CC + Railway works until someone pastes a prod key into an env var.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T17:48:17.000Z","created_at_i":1785433697,"id":49113276,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"You can do this in lovable too now. But i dont think it gets used a lot. I think it is not very unique, i have seen bunch of providers, some are selling ai workers, some are selling internal tools in different shape and form.
I think the moat for internal tools is not where you think it is. Also, i see self host option, it is a nightmare too, no one will do it just for internal tools now. It was valid before AI era.
I am also seeing non engineering staff actually building tools with claudecode, paas like railway and stuff. People have become more efficient with engineer tools.","title":null,"type":"comment","url":null},{"author":"nodesocket","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T22:42:24.000Z","created_at_i":1785451344,"id":49116798,"options":[],"parent_id":49113288,"points":null,"story_id":49109721,"text":"Thanks! Custom beats generic if building it takes days instead of months.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T17:49:15.000Z","created_at_i":1785433755,"id":49113288,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Congratulations on the launch. I\u2019m very bullish on this concept of allowing SMB\u2019s and startups to roll their own software and internal tools. Many many moons ago I built an entire inventory tracking and CRM for a very small company in PHP (circa 2006). It ran the entire company with orders, customers, devices, and revenue. It was a monstrous app, and took forever. Today, could be build in a matter of days and much better.
Along the same lines. I got so fed up with Quickbooks self employed (god awful software and company) for my own business I wrote a replacement using Cursor. It tracks expenses (categorizing each in proper IRS categories) and estimating quarterly taxes. Uses Plaid to pull in business bank accounts and credit cards and has income and expense reports. It\u2019s 100x better than Quickbooks.","title":null,"type":"comment","url":null},{"author":"AnonHP","children":[{"author":"tcdent","children":[{"author":"dewey","children":[{"author":"tcdent","children":[],"created_at":"2026-07-30T19:52:41.000Z","created_at_i":1785441161,"id":49114895,"options":[],"parent_id":49114524,"points":null,"story_id":49109721,"text":"Completely agree.
This posture is applicable while we ease out of what I'm calling the "golden era" (loose restrictions on access with limited consequence) but one of the reasons I am pedantic and bearish about solutions like this is that they too have a short lifespan that we can already estimate the expiration date of.","title":null,"type":"comment","url":null},{"author":"ChrisMarshallNY","children":[{"author":"dewey","children":[{"author":"ChrisMarshallNY","children":[],"created_at":"2026-07-31T11:04:18.000Z","created_at_i":1785495858,"id":49121628,"options":[],"parent_id":49120168,"points":null,"story_id":49109721,"text":"Fair point.","title":null,"type":"comment","url":null}],"created_at":"2026-07-31T07:40:14.000Z","created_at_i":1785483614,"id":49120168,"options":[],"parent_id":49117597,"points":null,"story_id":49109721,"text":"I wouldn't say that's a "Marketing person" failure mode, there's enough open buckets, public mongodb or Elastic instances with wrong credentials.","title":null,"type":"comment","url":null}],"created_at":"2026-07-31T00:22:32.000Z","created_at_i":1785457352,"id":49117597,"options":[],"parent_id":49114524,"points":null,"story_id":49109721,"text":"Aren't a large number of massive data leaks caused by some Marketing person setting up an AWS instance, and dumping the corporate DB into it?","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T19:25:48.000Z","created_at_i":1785439548,"id":49114524,"options":[],"parent_id":49114194,"points":null,"story_id":49109721,"text":"Maybe that's a hot take, but it's probably still safer than how things are often done in reality when employees want to "get something done" and sign up for random services, download their own software or other variants of shadow IT.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T18:59:52.000Z","created_at_i":1785437992,"id":49114194,"options":[],"parent_id":49113298,"points":null,"story_id":49109721,"text":"It's not reliable, and presenting it as-such shows a lack of understanding of basic security posture.
Don't take my word for it, watch the news in <6 months and we'll certainly see it get bypassed.","title":null,"type":"comment","url":null},{"author":"hudsongr","children":[{"author":"Arshad-Talpur","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-30T22:32:15.000Z","created_at_i":1785450735,"id":49116711,"options":[],"parent_id":49115208,"points":null,"story_id":49109721,"text":"You're right, and we don't. The judge is best-effort screening not enforcement. Enforcement is deterministic with per-tool Postgres roles, proxy-injected creds, host allow-list, human approval on destructive writes. Those hold whether the judge is right or wrong.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T20:18:15.000Z","created_at_i":1785442695,"id":49115208,"options":[],"parent_id":49114802,"points":null,"story_id":49109721,"text":"One of the core issue here is LLMs are probabilistic not deterministic, even with set of rules or context , llms are inherently built to make best guess, so my question is how you are ensuring that LLMs are following rules?","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T19:44:59.000Z","created_at_i":1785440699,"id":49114802,"options":[],"parent_id":49113298,"points":null,"story_id":49109721,"text":"We assume LLMs can always be fooled, so the judge is just one step of the verification process. The deterministic layers, per-tool db roles, read-only-by-default integrations, query timeouts, are the ones an admin can configure. The judge's rules aren't exposed to admins today. I like your idea of letting admins add their own rules or knowledge to the judge, we should add that.","title":null,"type":"comment","url":null},{"author":"felixding","children":[],"created_at":"2026-07-31T00:06:29.000Z","created_at_i":1785456389,"id":49117481,"options":[],"parent_id":49113298,"points":null,"story_id":49109721,"text":"It's not safe or reliable, no matter how hard you try. Fundamentally, agents will try whatever they can to achieve the goal, as we've seen in many recent security incidents.
If determinism is important, as it is in many business use cases, use agents to build the tool, but don't let them run it.
I built a similar product around this exact idea: AI builds the workflow. Fixed rules run it.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T17:50:00.000Z","created_at_i":1785433800,"id":49113298,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"> Any call the agent makes to an external connector is reviewed by an LLM judge to prevent dangerous operations.
A few basic questions: how reliable is this judge since it\u2019s based on an LLM? What additional measures can an admin or someone with more technical knowledge take to tighten this further if needed? Are the rules in or used by this judge visible to the users or an admin?","title":null,"type":"comment","url":null},{"author":"scottydelta","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-31T16:04:37.000Z","created_at_i":1785513877,"id":49124862,"options":[],"parent_id":49116820,"points":null,"story_id":49109721,"text":"Heard, we're actively working on this and should have updated pricing plans soon.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T22:46:21.000Z","created_at_i":1785451581,"id":49116820,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"I know someone who could use this but a price point/plan between $0 and $100 would be a good way to help people get started.","title":null,"type":"comment","url":null},{"author":"felixding","children":[{"author":"marinoseliades","children":[],"created_at":"2026-07-31T16:10:59.000Z","created_at_i":1785514259,"id":49124973,"options":[],"parent_id":49117412,"points":null,"story_id":49109721,"text":"More on this, we're still experimenting between a hard vs. soft paywall. Regardless, if you sign up it should be easy enough to play around with it for a while on the free tier. We promise that we don't send spam/marketing emails.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T23:58:27.000Z","created_at_i":1785455907,"id":49117412,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"Please don't let users "try" your product only to immediately hit a signup/signin wall. It instantly undermines whatever trust the demo may have established.","title":null,"type":"comment","url":null},{"author":"renezander030","children":[],"created_at":"2026-07-31T07:24:09.000Z","created_at_i":1785482649,"id":49120057,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"On the egress judge: an LLM reviewing connector calls inline is a probabilistic control sitting where a capability grant belongs. The operations that actually cause damage are largely enumerable: writes, deletes, and bulk reads of personal data. Those should be absent from the scoped token rather than present and then argued about by a judge with a nonzero false-negative rate under adversarial input, with the judge kept for the ambiguous long tail where enumeration genuinely fails. This is the WAF story again, request inspection in front of an app was a useful compensating control, and every team that mistook it for the boundary relearned that the boundary was the parameterized query and the database grant.","title":null,"type":"comment","url":null},{"author":"fabijanbajo","children":[],"created_at":"2026-07-31T07:44:07.000Z","created_at_i":1785483847,"id":49120190,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"the credentials-out-of-the-sandbox part is the easy half. the quieter failure is a tool that holds no keys and still renders rows this particular employee was never meant to see.. sign-in proves who someone is, it doesn't scope what the query returns.
does the scoped token narrow to the requesting user, or is it one service identity per connector with the row filtering left to whatever the agent generated?","title":null,"type":"comment","url":null},{"author":"karam_hn","children":[{"author":"Normal_gaussian","children":[],"created_at":"2026-07-31T16:54:06.000Z","created_at_i":1785516846,"id":49125667,"options":[],"parent_id":49123180,"points":null,"story_id":49109721,"text":"The basic build was never that expensive; the complications are always where the time goes.","title":null,"type":"comment","url":null}],"created_at":"2026-07-31T13:54:38.000Z","created_at_i":1785506078,"id":49123180,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":"As someone who isn't an engineer but shipped a real product this year by leaning\non AI tooling, the thing that surprised me most wasn't building the features \u2014 it\nwas everything around them: payments, auth, not breaking prod, knowing when the\noutput was subtly wrong. The "build" got cheap; the judgment didn't. Curious how\nyou handle that last part for non-technical users.","title":null,"type":"comment","url":null},{"author":"Suppafly","children":[],"created_at":"2026-08-02T04:34:29.000Z","created_at_i":1785645269,"id":49141124,"options":[],"parent_id":49109721,"points":null,"story_id":49109721,"text":">Let non-engineer staff build secure internal tools
That seems like a really bad idea.","title":null,"type":"comment","url":null}],"created_at":"2026-07-30T13:29:03.000Z","created_at_i":1785418143,"id":49109721,"options":[],"parent_id":null,"points":77,"story_id":49109721,"text":"Hi HN, we're Marinos and Hudson, founders of Prized (https://prized.dev)! Prized lets non-engineer employees describe the internal tool they need and get a full-stack app, wired to their company\u2019s data and deployed behind the company\u2019s sign-in, without them ever juggling API keys or connectors.
Here's a demo: https://www.youtube.com/watch?v=730MuYOfZTY
The way Prized provides security is by limiting what the agent can reach at the network layer and by keeping credentials out of the sandbox entirely. The sandbox never holds any keys or connector secrets, it only uses scoped session tokens that are stored as opaque placeholders. The real values are swapped into the request headers on our egress proxy. When production data is connected, the sandbox's network policy is set to deny by default so the only path out is via the proxy. Any call the agent makes to an external connector is reviewed by an LLM judge to prevent dangerous operations.
Prized is meant for the internal workflows that start as notebooks or spreadsheets but never become real tools because engineering has more important things to work on. One customer\u2019s data scientist pasted in his personal fraud-detection notebook with hardcoded thresholds and all. After a few prompts, it became a published risk console connected to the company\u2019s data with those thresholds turned into UI controls. Earlier today, we got off a call with them and most of their company is using it.
To do this, you need to give people the freedom to build without having unaudited access to company systems. We allow admins to scope data to specific users or teams and data access is recorded in an audit log. Each tool is built with its own Postgres schema and role, with queries running via an authenticated SQL gateway as that role.
We think Prized sits between products like Lovable and Retool. Lovable makes it easy to generate and host software, but it isn\u2019t designed around distribution with permissions. Retool generally assumes that a technical builder is creating an app for an end user.
Prized treats internal tools as shared objects. Anyone in the workspace can see what others have built, fork, and connect different data. For example, one customer\u2019s marketing lead built a promotional analytics tool. A data scientist at the same company then forked it and added confidence intervals with the existing tool as a starting base. This way workspaces become libraries of tools that people can reuse.
We\u2019re live and self-serve. Our free tier includes 2 tool builds/month and our Teams tier is $100/month. The Enterprise tier is custom and supports personalized features like on-prem deployment.
We're still working out the right boundary between control and freedom. If you've built internal tools before we'd appreciate your feedback!","title":"Launch HN: Prized (YC S26) \u2013 Let non-engineer staff build secure internal tools","type":"story","url":"https://prized.dev"}