# Every way to keep an internal app private, side by side

> Canonical: https://teamonly.dev/compare

Checked October 2026.

You built a tool and only your coworkers should use it. Here is what each option asks of you and of them. We make one of these, so we have linked every claim to the vendor's own docs. Tell us if something is out of date.

## The short answer

Most "make it private" options make every coworker get an account on the platform you built with, or pay for a password per project.

If you want coworkers to sign in with the **work Google or Microsoft account they already have**, your choices are to configure Cloudflare Access (or similar) yourself, or to use a host that does it for you. TeamOnly is the second kind, with the database included.

## Comparison table

| Option | Do coworkers need a new account? | Company Google or Microsoft login | Database included | Price to make it private | What you set up |
|---|---|---|---|---|---|
| TeamOnly | No | Yes, Google today, Microsoft soon | Yes, one per app | $19/mo, app users free | One command |
| Replit | Yes, Replit account in your workspace | Through Replit | Yes, built in | Depends on plan | A setting |
| Lovable | Yes, Lovable account | Workspace-only on Business or Enterprise | Through an integration | Business plan for workspace-only | A setting |
| Vercel | Yes, Vercel account, or a shared password | No | Add one separately | $20/mo per project for a password (Pro) | A setting, plus a database |
| Netlify | Yes, Netlify account, or a shared password | No | Add one separately | Shared password on Pro | A setting, plus a database |
| Cloudflare Access | No | Yes, once you configure it | Not a host | Free up to 50 users | Identity provider, login app and policies |

Checked October 2026 against each vendor's documentation, linked below. TeamOnly is in early access: Builder and Team are open, and Microsoft sign-in is coming soon.

## Replit private deployments

Turn on a private deployment and only people in your Replit workspace, or people you invite, can open the app. They sign in through Replit. Good if your coworkers already use Replit.

Source: [Replit docs: private deployments](https://docs.replit.com/features/publishing/private-deployments)

## Lovable workspace publishing

Publishing so only your workspace can see an app needs a Business or Enterprise plan. On Free and Pro, sharing is invite-only, capped at 10 people, and each visitor needs a Lovable account.

Sources: [Lovable docs: project visibility](https://docs.lovable.dev/features/project-visibility), [Publishing](https://docs.lovable.dev/features/publish)

## Vercel Authentication and password protection

Vercel Authentication only lets in visitors with a Vercel account who have access to the project. Password protection is $20 a month per project on Pro. Vercel is excellent for public sites; a team login is not what it is built around.

Sources: [Vercel docs: Vercel Authentication](https://vercel.com/docs/deployment-protection/methods-to-protect-deployments/vercel-authentication), [Pricing](https://vercel.com/docs/deployment-protection/usage-and-pricing)

## Netlify private sites

Netlify can require visitors to log in with a Netlify account. A shared site password is a Pro feature.

Source: [Netlify docs: password protection](https://docs.netlify.com/manage/security/secure-access-to-sites/password-protection/)

## Cloudflare Access

Free for up to 50 users, and it really does put your company login in front of an app. You configure it: connect Google Workspace or Microsoft Entra as the identity provider, create the login app, and write a policy for each app. It protects an app; it doesn't host it or give it a database. If you are comfortable with that setup, it is a strong, free option. TeamOnly runs on Cloudflare too.

Source: [Cloudflare docs: secure a private web app](https://developers.cloudflare.com/cloudflare-one/setup/secure-private-apps/private-web-app)

## Retool and app builders

Retool, and builders like it, take a different approach: you build the tool inside their product, and they handle hosting and login. That works well if you want to build that way. If you already have code from Claude Code or Cursor, you need somewhere to run that code instead. Retool's own [Retool vs Claude Code](https://retool.com/blog/retool-vs-claude-code) post is a fair read.

## When TeamOnly is the wrong choice

- **Your app is public.** Customer-facing apps, marketing sites, anything strangers should open. We don't host those, on purpose. Vercel, Netlify or Cloudflare will serve you well.
- **Your app isn't JavaScript.** We run React front ends with a small JavaScript or TypeScript API. Python, Ruby, PHP or anything needing a container is not supported yet.
- **You need SAML today.** SAML SSO and audit logs are part of our Business plan, which is coming later and not built yet. If you need them now, look at Cloudflare Access or an enterprise platform.
- **Your company only uses Microsoft 365.** Microsoft sign-in is coming soon but isn't live yet. [Get updates](https://teamonly.dev/waitlist) and we will tell you when it ships.
- **Your coworkers already live in Replit or Lovable.** If everyone has an account there anyway, their private sharing may be all you need.

## Questions people ask

### How do I make my Replit app private?

Use a private deployment. Viewers then have to be members of your Replit workspace or be invited, and they sign in through Replit. See Replit's private deployments documentation for current plan requirements.

### Are Lovable apps private?

Not by default. As of October 2026, publishing so only your workspace can see an app needs a Business or Enterprise plan. On Free and Pro, sharing is invite-only, up to 10 people, and visitors need Lovable accounts.

### Is Vercel password protection free?

No. As of October 2026 it costs $20 a month per project on the Pro plan. Vercel Authentication is the other option, and it requires each visitor to have a Vercel account with access to the project.

### Can I use Cloudflare Access for free?

Yes, for up to 50 users. You connect your identity provider, create the login app and write the access policies yourself.

## Keep reading

- [Company-only login](https://teamonly.dev/company-login)
- [Pricing](https://teamonly.dev/pricing)
- [From Claude Code](https://teamonly.dev/claude-code)
- [From Cursor](https://teamonly.dev/cursor)
- [For IT](https://teamonly.dev/for-it)

Get started: https://teamonly.dev/pricing#subscribe (Builder $19/mo, Team $249/mo)
Not ready? Get updates: https://teamonly.dev/waitlist