Retool and Forculus
Retool is a platform for building internal apps, and it says an app made in Retool or in your coding agent ships with SSO, role-based access and audit logging. On its price list, your own SSO is an Enterprise feature and audit logs start on Business. Forculus hosts the app your coding agent already wrote, as code, private behind sign-in on every plan, with the audit log on Free.
Updated
What follows about Retool comes from its own pages, read on 22 October 2026 and listed at the end.
What Retool offers
- Retool's page for AI-built apps says an app "runs under the same identity, permissions, and audit controls", and that it can be built "in Retool or your preferred coding agent".
- It runs in Retool's cloud, in your own VPC, or self-hosted.
- Credentials stay with the platform and never go into the app's code.
- Retool prices per user, by role. Free is for up to 5 users. On Team a builder is $10 a month and an internal user $5, billed yearly, or $12 and $7 monthly. On Business a builder is $50 and an internal user $15, billed yearly, or $65 and $18 monthly.
- Custom SSO, for Okta, Active Directory or any SAML or OpenID provider, is on Enterprise. So are source control and SCIM. Audit logs are on Business and Enterprise.
Side by side, for an internal app
| What | Retool | Forculus |
|---|---|---|
| How it's priced | Per user a month, by role: builders, internal users and external users | Per workspace a month. People you share an app with as viewers don't count |
| What you deploy | An app built in Retool, or one from a coding agent, run on Retool's platform | The code your agent wrote, as it is: a Worker, a static site or a container (Python, Go, Rust or Node) |
| Your company's SSO | Enterprise | Enterprise, and on Business for early customers for a limited time |
| Audit log | Business and Enterprise | Every plan. Kept 3 months on Free and Team, 12 months on Business and Enterprise |
| Keys for other services | Kept by the platform, out of the app's code | Kept by us and added to each request on the way out, so the code never holds them |
| Where it runs | Retool's cloud, your VPC, or self-hosted | Our cloud, on Cloudflare. No self-hosted option |
When Retool is the better fit
When your team builds internal tools in Retool's editor, on top of your databases and APIs, and wants them kept there. And when the apps have to run in your own VPC or on your own servers, which Forculus doesn't offer.
When Forculus is the better fit
When the apps already exist as code, written by Claude Code, Codex or Cursor, and you want them live without rebuilding them on another platform. Say "ship it" in the agent, or run forculus deploy, and the app is live at a private address. Everyone you share it with signs in with a code sent to their email, a passkey, Google or Microsoft, and costs nothing as a viewer.
Questions
Does Retool have SSO on every plan?
No. Retool's price list puts Custom SSO, for Okta, Active Directory or any SAML or OpenID provider, on Enterprise only.
Can Forculus run an app built in Retool's editor?
No. Forculus runs code: a Worker, a static site or a container. An app a coding agent wrote in a folder or a git repository deploys as it is.
Is the audit log extra on Forculus?
No. Every plan has it, Free included. It records every request let in or refused, and every change with who made it.
Sources
- Secure Vibe Coding for Enterprise, Retool. Checked 22 October 2026.
- Pricing, Retool. Checked 22 October 2026.
Next
- Import from a repository, in the docs
- How we differ from other ways to keep an app private
- Pricing