Base44

You can run a Tenzai penetration test against a published Base44 app. It attacks the running app alongside Base44's code scan.

On Builder and above, a workspace admin or owner connects Tenzai through Connectors. With an up-to-date code scan, open the app's Security page and choose Run penetration test. One test runs at a time, and Fullstack apps aren't supported.

Tenzai uses a scoped test login; Base44 says it never receives your own login.…

Base44 workspace owners and admins can now choose whether app owners may share builder apps and Base Code apps with the whole workspace. When sharing is allowed, anyone in the workspace can join without an invite.

The control is available on Business and Enterprise plans. The same Collaboration settings also control who can invite people from outside the workspace.

Original source

You can now move a domain bought through Base44 to another app in the same workspace.

Unlink the domain, delete it from the old app, then connect it to the new one. It keeps its Base44 Domain tag and connects straight away, with no DNS records to set up.

Original source

Base44’s security scan now flags custom User fields that app users can edit when those fields also control data permissions. A company field that determines which records someone can see is one example.

Click Fix All to lock the affected fields so only app editors can change them. The fix also moves places where the app sets those fields, such as onboarding, into server-side checks.

Base44 advises testing any signup or onboarding steps that set the fields, then running the scan again.…

Base44 workspace owners and admins on Enterprise can now control which AI models members can use.

You can turn off whole providers, open-weight models or models that use more credits. You can also set a default for members who haven’t picked a model themselves. Disabled models stay visible but unavailable in every model picker.

Original source

Base44 apps created from October 18, 2026 have plan-based limits on database size and the size of each record.

You can check an app’s usage on the Database card in its App usage page.

Original source

Base44’s effort levels are now available to everyone who manually chooses a model, on every model that offers them. Choosing your own model requires Builder or above.

Levels range from Low for quick changes to Max for harder problems. Higher effort takes longer and uses more credits.

Original source

Base44 apps can now run up to 20 builds at once, up from 5.

The limit is shared across main and all branches, including teammates’ builds. You can send a request on one branch, then switch to another and keep building while it finishes. The branch menu shows which branches are building.

Original source

Base44 can now send workspace events to your own URL. Workspace owners and admins on Business and Enterprise can set up outgoing webhooks for app events, such as publishing or going offline, and for AI chat starting or finishing a reply.

Each webhook receives its selected events across every app in the workspace. Requests are signed, and sending them doesn’t use credits.

Set them up in workspace Settings, under Webhooks → Outgoing. You can register up to 10 HTTPS endpoints.…

Base44 now charges for replies the AI has already finished when you stop it partway through, the same way it charges for a message that runs to the end. Stopping before its first reply stays free.

Original source