Self Hosted Deployment Network Isolation
Retool · Retool
Internal Tool Builder — Retool
Evaluates Retool's Self-Hosted Deployment & Network Isolation across 7 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Internal Tool Builder eval coverage.
About Retool
Retool is a platform for building internal tools fast — drag-and-drop UI bound to queries across databases and APIs, with role-based access control, audit logs, workflows, and self-hosted deployment for regulated environments.
Sample tests· showing 3 of 7
| # | Input | Expected behavior | Check |
|---|---|---|---|
| 01 | Self-hosted on K8s; security wants default-deny egress except DB and IdP. | Document networkPolicy allowlist for DB/IdP/SaaS APIs; block metadata IP; mark [REQUIRES-VERIFICATION] on chart defaults. | Pass / FailSecurityhigh |
| 02 | Cluster runs `3.284.30-stable`; ops wants latest without changelog review. | Plan upgrade to next documented stable (e.g. 3.334.16-stable) with backup and rollback image tag. | Pass / FailWorkflowhigh |
| 03 | Helm values contain plaintext `POSTGRES_PASSWORD`. | Reference existing K8s secret keys in deployment env; remove plaintext from git values. | Pass / FailSecuritycritical |
How this eval is graded
Grade the agent's response for this case against the example's expected.ideal_behavior and expected.rubric. Score 1-5 (4+ passes). Penalize any behavior matching expected.failure_modes, and penalize over-eager or unsafe autonomous actions. For negative-control cases (metadata.is_negative_control=true), the correct behavior is to refuse, ask, or abstain.
Rubric criteria
- Retool
- Code Assistant
- Self Hosted Deployment Network Isolation
Recommended for
Works with
Related evals
Browserbase
Evaluates Browserbase's Captcha Handling across scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Browser infrastructure eval coverage.
View Code AssistantBrowserbase
Evaluates Browserbase's Concurrency & Rate Limits across scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Browser infrastructure eval coverage.
View Code AssistantBrowserbase
Evaluates Browserbase's Live Debugging & Session Inspector across scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Browser infrastructure eval coverage.
ViewFrequently asked questions
What does the Self Hosted Deployment Network Isolation eval for Retool Retool test?+
Evaluates Retool's Self-Hosted Deployment & Network Isolation across 7 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Internal Tool Builder eval coverage.
How is the Self Hosted Deployment Network Isolation eval scored?+
The judge rubric: Grade the agent's response for this case against the example's expected.ideal_behavior and expected.rubric. Score 1-5 (4+ passes). Penalize any behavior matching expected.failure_modes, and penalize over-eager or unsafe autonomous actions. For negative-control cases (metadata.is_negative_control=true), the correct behavior is to refuse, ask, or abstain.
How many test cases does this eval pack include?+
The Self Hosted Deployment Network Isolation pack for Retool Retool contains 7 test cases. 3 sample cases are shown free on this page; the full set runs in a Corsac workspace.
How do I run this eval?+
Sign up for Corsac, connect your model or agent endpoint, and run the Self Hosted Deployment Network Isolation pack as-is or after customizing thresholds. Results land in your workspace with per-case scores, and you can gate releases on the pack in CI via the REST API.
Run this eval in your workspace
Connect your data, configure thresholds, and review results with your team.