| ▲ | Launch HN: Prized (YC S26) – Let non-engineer staff build secure internal tools(prized.dev) | |||||||||||||||||||||||||||||||||||||
| 47 points by marinoseliades 4 hours ago | 24 comments | ||||||||||||||||||||||||||||||||||||||
Hi HN, we're Marinos and Hudson, founders of Prized (https://prized.dev)! Prized lets non-engineer employees describe the internal tool they need and get a full-stack app, wired to their company’s data and deployed behind the company’s sign-in, without them ever juggling API keys or connectors. Here's a demo: https://www.youtube.com/watch?v=730MuYOfZTY The way Prized provides security is by limiting what the agent can reach at the network layer and by keeping credentials out of the sandbox entirely. The sandbox never holds any keys or connector secrets, it only uses scoped session tokens that are stored as opaque placeholders. The real values are swapped into the request headers on our egress proxy. When production data is connected, the sandbox's network policy is set to deny by default so the only path out is via the proxy. Any call the agent makes to an external connector is reviewed by an LLM judge to prevent dangerous operations. Prized is meant for the internal workflows that start as notebooks or spreadsheets but never become real tools because engineering has more important things to work on. One customer’s data scientist pasted in his personal fraud-detection notebook with hardcoded thresholds and all. After a few prompts, it became a published risk console connected to the company’s data with those thresholds turned into UI controls. Earlier today, we got off a call with them and most of their company is using it. To do this, you need to give people the freedom to build without having unaudited access to company systems. We allow admins to scope data to specific users or teams and data access is recorded in an audit log. Each tool is built with its own Postgres schema and role, with queries running via an authenticated SQL gateway as that role. We think Prized sits between products like Lovable and Retool. Lovable makes it easy to generate and host software, but it isn’t designed around distribution with permissions. Retool generally assumes that a technical builder is creating an app for an end user. Prized treats internal tools as shared objects. Anyone in the workspace can see what others have built, fork, and connect different data. For example, one customer’s marketing lead built a promotional analytics tool. A data scientist at the same company then forked it and added confidence intervals with the existing tool as a starting base. This way workspaces become libraries of tools that people can reuse. We’re live and self-serve. Our free tier includes 2 tool builds/month and our Teams tier is $100/month. The Enterprise tier is custom and supports personalized features like on-prem deployment. We're still working out the right boundary between control and freedom. If you've built internal tools before we'd appreciate your feedback! | ||||||||||||||||||||||||||||||||||||||
| ▲ | dchuk 2 hours ago | parent | next [-] | |||||||||||||||||||||||||||||||||||||
I’m playing with this exact concept but going down the path of a Claude code plugin that is optimized for configuring lowdefy apps because of that framework’s unique approach where you don’t write code you generate yaml configs that then drive the rendering of an app. So far it’s working pretty well, still pressure testing it. The audit control and permissions management you have is great, especially around the connectors. Nice job! | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | wseadowntown 3 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I like the security-first posture. What's your view on how foundation models will or won't evolve into this space? Like will CC steamroll this in 2 years when it can natively build connectors and run them from within the desktop app? Not saying you won't have an ongoing edge, I just want to understand the thesis better so I can learn. Cool product! | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | iamniels 3 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Congratulations with your launch! I suspect the product market fit for tools like these will be huge. Especially for SMBs with just 10s of employees in the office, lacking the budget for SAP consultants. However I think the agent creating an app is adding unnecessary complexity. Users want answers or insight in data, why build an app for that if the agent can provide it directly? | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | Echo4309 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Awesome launch and good pricing. We built an equivalent version in our org that takes HTML/JSX files and stores/serves them like an S3 bucket would. Works fabulous and we considered turning it into a SaaS product, met a real need in our org. Wishing you guys the very best of luck!! | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | jedberg 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
How does this differ from retool? | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | rgbrgb 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Very cool. What model is used for the judge? We use setoku for Claude-built internal tooling but the design doesn’t allow writes so that there’s no inference cost on the server. Having the judge check for danger is a neat design. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | christoff12 an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I like this a lot. Do you handle scenarios where the data and context live in a data warehouse (Snowflake, etc)? There are a lot of operational needs that exist downstream from dbt models that combine data from the various source systems. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | Bnjoroge 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Demo looks cool, congrats on the ship! Probably missed but is it possible to externally share/view the built artifact outside of prized? | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | inflam52 2 hours ago | parent | prev [-] | |||||||||||||||||||||||||||||||||||||
Seems like Superblocks | ||||||||||||||||||||||||||||||||||||||