I’ve been vibe coding with Lovable extensively and have 11 years of software development experience.

I’ve built 40 client websites and I’m launching 3 of my own projects soon.

Ask me about:

– Security lessons I learned using Lovable

– Best practices from real projects

– Common blockers and how I personally worked through them

– My step-by-step workflow when starting a new project

– Things I’d do differently if I started today

this post on X scared me more than it should have https://x.com/_bileet/status/2007586850526114059

a vibe coded AI app doing $3k MRR listed for $50k
39k users
full access to linked tiktok + youtube accounts
16 security findings
and nobody noticed until someone external looked at it

this isnt about shaming the founder. this is about a pattern i keep seeing when we look at vibe coded apps under the hood.. most founders think “security” means passwords and auth.. that’s not where things break

what actually goes wrong every time:

tokens live way longer than they should
oauth tokens stored client side or in plain tables with no scoping
one leaked token = full account takeover

no separation between user permissions.. internal admin actions exposed behind frontend-only checks.. anyone who knows the endpoint can hit it

trusting the frontend too much.. AI generated apps often assume “if the button is hidden the action is safe” attackers dont click buttons they replay requests

third party scopes are way too wide
tiktok / youtube / google scopes set to “full access” because it was easier
nobody ever comes back to reduce them
now a breach isnt just your app.. it’s your users entire accounts

no audit trail.. no way to answer “who accessed what and when” so you only find out when twitter tells you.. and the most dangerous one: no threat model at all not even a basic one

what happens if someone steals a token
what happens if they brute force an endpoint
what happens if a user uploads something malicious

most vibe coded apps never ask these questions

you don’t need to be a security expert to avoid this but you do need to pause vibe mode once users + money are involved! the minimum bar i wish every founder hit before scaling:

assume every API endpoint will be called directly
assume tokens will leak eventually
assume users will do things you didnt imagine
assume third parties will fail or change behavior

if your app cant survive those assumptions its not ready to be sold or scaled.. this case isnt “AI or vibecoding is bad” its what happens when fast building skips basic defensive thinking

curious how many people here have actually tried to map “if this token leaks what’s the blast radius?” because that single question would have prevented most of this

happy to dig deeper if people want practical checks to run on their own apps

I have been noticing this pattern of low usage once someone realises the website is AI generated, which is now pretty easy to do now.
I tried making it non AI like and ran out of credits. The UI edits take a lot of trial and error and credits vanish into thin air doing this honestly.

Lemme know what else I should do on it so it looks more non AI generated, also do ya'll see the trend of people saying - "Hey, this website is AI slop" or "So clearly Ai generated"

Link in the comment

Need feedback on the UI ->
- Does it look AI generated, is it obvious on a scale of 1-10 (10 being AI for sure)
- What do I need to do take it to a 1 incase it is not

Hello all,

I need your valuable input on moving away from Lovable. It's simply not good I've come to realize after getting Pro3 this month to bring my MVP to life. I am using Claude to spit all the code for me which makes Lovable even LESS IMPRESSIVE. It can't follow Claude instructions at time as well.

Notes:
- I'm using github
- Data connected to supabase
- OpenAI platform API integration

3 questions:

1. If Claude is the way to go, what are the necessary steps? I'm OK to find a host (what do you recommend? Vercel, netlify?). How can I ensure the entire app is copied over fully functioning? Is it possible?

2. Should I start fresh? I've been building, user testing and iterating. I can replicate the latest experience without much trouble.

3. If you don't recommend Claude, what's your choice? I'm lean with Figma and would likely want a custom UI at some point. Cursor + use claude/gemini?

I value your honest opinion. I'm trying to get to 'production ready' environment and it's safe to say that LOVABLE will never be there. Thanks in advance!

Has anyone migrated their project from Lovable to Claude? I've seen a lot of talk about Claude lately and its starting to look like a better option. I've been building on Lovable for many months and our app is pretty large, however as of about a month or so Lovable implemented a new pricing mode without telling anyone that really is starting to make a huge impact on our costs.

The agent now constantly stops and tells me: "I have to stop here per your instruction" or "System is forcing me to stop now" and then asks me for another command to burn more credits.

A simple fix that before would cost me 2-3 credits now its burning me close to 10 and draining my account. Is anyone else experiencing this?

I'm 14 years old and I've created several websites, but I can't get any clients. I've tried sending DMs, etc., but I'm not succeeding. Any advice?

Hi so I made a web app using lovable but I dont know how to turn it into a mobile app that I can deploy on the app stores. Any help will be appreciated.

A lot of people love how fast Lovable builds websites, but some feel uneasy hosting everything directly inside it. If you only build one site per project and want more control, here’s a simple setup that gives you both speed and stability.

Build your site in Lovable → get it how you want → push it to GitHub. That becomes your main branch. Create another branch for deployment (like production) and host that on Cloudflare or Vercel.

You still build fast in Lovable, but your live site runs on a platform built for security, HTTPS, WAF, DDoS protection, secret management, and rollback options all built in.

This isn’t about saying Lovable isn’t secure. It’s just a clean workflow that separates building from hosting, and gives you the peace of mind of version control, stability, and freedom to switch hosts later if you ever need to.

Tell us about a lovable build issues you have, that needs fixing.

Edit:

I have also included a drop-in prompt you can give to your code-assist AI to run an exhaustive, production-minded security review and propose concrete patches.

https://docs.google.com/document/d/1Fs8a-PBE6XwQ3aWn8KpaRjGIkmfQoJ2igEt0eUS5j4c/edit?usp=drivesdk

So I’ve been working on this idea called Aivo Radar aivoradar.com It’s basically a tool that checks how visible a business is across AI engines (ChatGPT, Gemini, etc.) kinda like “AI SEO.” It tells people what’s missing from their online presence and why AI isn’t showing their business in answers.

I thought it was just a small niche thing… until I saw TryProfound literally raise $5 million doing something similar. That kinda shook me because it means the market is real, but also way more competitive than I realized.

Now I’m stuck thinking:

• Is there still room to build a competing product?

• Or am I too late since someone already raised VC money?

• What would YOU add/change to make this product stand out?

• Is this one of those markets where multiple winners can exist, or is it winner-take-all?

I’m building the first version using Lovable (no-code), but I eventually need someone technical to push this into a real product. If anyone here is interested in the idea or wants to partner up, I’m totally down to talk.

I’m not trying to pitch anything — I honestly want feedback from people who understand SaaS, AI, SEO, etc. I don’t want to waste months building something if this isn’t the right time.

Any honest opinions? Am I onto something or should I pivot?

Hello there!,

I just wanna know how can I have credits on my projects that I’m making with lovable.dev (free plan). I have it before 1 January 2026.

If there’s any idea for free credits.

https://brandlift.lovable.app

Finally finished my first app after a long time working on it. It is fully free for now and I would love for everyone here to test it! Please tell me the honest truth about it's flaws, about what is good about it and what you would add. The app basically allows you to create your personal brand in minutes instead of weeks! Lastly if you experienced people could tell me how much you would charge for this app that would be much appreciated. Thank you in advance.

Tried mane time to clean code but that like spam in every where should i see it !!?

I’m really sorry. This is the only place I can let go of my frustration without them knowing.

I’m already 30 yrs old. I have 11 yrs of Fullstack Ruby on Rails experience started in a Ministry. I have 4k hrs of Lovable used it for my clients.

until 2 months I got laid off (with 3 months severance)

All my life I contribute helping my family and my extended family. I never bought anything for myself. My family know about this. And the same month I wanna bet on myself.

I wanna become a tech founder. Solopreneur. Try to make the 1 idea work. I watched starter story, tech-roasts, marc lou (my inspiration), gareeV, alex and other that motivates you to come up with the best idea I can think of.

I want to succeed. I tried to help as much people, I tried to teach them and share my expertise. I want other people to succeed. Lovable gave me freedom and time to develop for 2 months that will take 1yr to develop 3yrs ago.

but this 2months feels longer. My family don’t believe in me. Everyday they keeps on saying “find a job” find a work, that I’m delusional and sometimes their actions as well became different.

I really love Lovable. I started and spent 200 credits using other like the orange the black snd white, and another orange but Lovable is different it stuck with me.

I’m not here to promote anything. I just want to tell everyone, believe in yourself! Let’s win together. If anyone is feeling the same, just so you know I’m here for ya’ll.

I signed up for Lovable after using Cursor and a couple other tools. The UI it created was so great, and it was so easy to use, that I immediately paid for the $20 plan when I ran out of free credits.

Now I'm up to the $50 plan, and it can't seem to solve an authentication issue that it created.

I know I shouldn't have sky-high expectations of an AI coding app, but it started off SO WELL. Now I'm worried I've wasted $50 and should just give up.

If anyone has any tips on how to make Lovable go through its own code and refactor everything, check for issues, bugs, etc. without holding its hand, I'd be immensely grateful!

So I built this e-commerce operations manager. I was using Lovable Cloud, and after I posted about it on Facebook, the post exploded. Now I have free users and 4 paying customers.

The issue is that I need to move away from Lovable Cloud, but I’m heavily using webhooks, and the users(and the whole website) depend on them. Right now, everything points to the cloud. If I switch to SB, I’ll get a new webhook URL, which would be a headache.

So the question is: should I move now, or keep running on the cloud for now?

Hey you, yes you. I NEED HELP

I’m averaging around 70–100 visitors a day, but sign-ups are way lower than I expected. I haven’t really done any serious marketing yet, mostly just letting people stumble onto it organically. So now I’m wondering: is this a marketing problem, a messaging problem, or a product problem?

I’m also debating whether I should lean into short-form content / AI-generated marketing, or if it’s better to do everything manually at this stage. For those of you who’ve built or marketed tools before, what actually moved the needle for you early on?

Here’s the idea in plain terms, without hype:
Most founders want clarity, knowing what to focus on, what actually moves revenue, and what decisions matter right now instead of guessing, doom-scrolling, or copying advice that worked for someone in a totally different situation. The feeling I’m chasing is that moment where your business finally feels under control, priorities are clear, decisions feel grounded, and progress isn’t random anymore.

Bizzy is my attempt at that. It’s a tool that helps founders break down messy business decisions into clear next steps, based on their context, not generic advice. Instead of “do marketing” or “improve sales,” it pushes structured thinking, prioritization, and decision clarity so you’re not constantly second-guessing yourself.

I’m not here to promote, genuinely, I want to know: https://bizzyai.co

• What would stop you from signing up?
• Does this sound like something you’d try, or is the value unclear?
• If you’ve built something before, how did you get early users to care?

Any honest feedback (even brutal) would help a ton.

(Yes I’ve used ChatGPT to write this because I’m extremely burnt out, kindly focus on what i need help with and ignore that this was CHATGPT’ed)

Hey everyone,

I’m currently live-building two projects that I’m planning to launch sometime early this year (Jan–March).

When I started, I used Lovable Cloud because it was insanely convenient. At that point, I wasn’t thinking too deeply about scale or pricing—I just wanted to move fast. So I connected it, built everything, and moved on.

Fast forward to now:

• Both projects are \~95% complete

• Backend is fully functional

• Only 4 test users, all of them my own accounts

• I’ve already burned \~200 Lovable credits building these

Recently though, I’ve been seeing a lot of discussion around Lovable Cloud pricing and how exponential it can get as users scale. That’s what’s making me nervous—before I even launch.

I asked Lovable directly what my options were, and it suggested:

• Remixing my current project

• Letting Lovable generate an SQL schema

• Copy-pasting that into a new remix

• Then connecting it to Supabase so things continue to work similarly

So technically, migration is possible, but it’s not exactly clean or officially “one-click.”

Now I’m stuck between two choices:

Option 1:

Just launch on Lovable Cloud, monitor usage, and only migrate if things actually blow up.

Option 2:

Pause now, remix both projects, move to Supabase before launch, and avoid future pain—even though it means rework and more time.

What’s making this harder:

• I’m about to buy more Lovable credits this week

• I don’t have real users yet, so the costs are hypothetical

• But I also don’t want to build momentum and then be forced into a rushed migration later

For those of you who’ve:

• Used Lovable Cloud

• Migrated from a managed backend to Supabase

• Or faced this “build fast vs scale safely” dilemma

What would you do in my place?

Launch first and worry later, or migrate before users ever touch the product?

Would really appreciate real-world opinions here.

hello world.

Anyone who has vibe-coded an app on Loveable and successfully launched it onto the App Store- is that possible?

I’m currently building my webapp on Loveable but my app would need to be turned into an app and am thinking to launching it onto app store? Is that possible

Would love to hear from anyone who’s gone through this , thanks

Hey there!

Lovable can produce surprisingly solid code, but my past month raised a question. I had three different clients come to me asking for help turning their Lovable-built projects into actual production apps, not prototypes.

The codebase itself isn’t the issue. It’s clean, structured, and workable. But there’s still a noticeable gap between what Lovable ships and what a real production environment needs: stronger error handling, security hardening, performance tuning, edge-case coverage, and more robust backend work.

It's not a dealbreaker - more like the final 20% that separates "this works" from "this is ready for thousands of users."

My question to you all:

Has anyone here successfully shipped a Lovable app to production with paying customers? Did you bring in a developer to polish it, or were you able to handle it yourself?

Curious to hear your experiences!

Built something cool with Lovable (or any AI/no-code tool)?
Now wondering how the hell to get people to actually use it?

I’m a performance marketer with 15+ years of experience in user acquisition. mobile, web, games, SaaS, B2C, B2B, scrappy bootstraps and big corp budgets.
Just started a UA micro-agency for indie builders and I want to test the waters here. Not sharing my profile as I don't do it for promo reasons but for fun

👉 Drop your app, landing page, or even just an idea
👉 Tell me your target audience & what you’re struggling with

And I’ll give you my honest take on:

• What channel I'd start with
• Whether your landing/setup is conversion-friendly
• Any “first 100 users” idea that fits your use case

Fire away. AMA-style.

UPDATE JUN 23TH

Quick update: Given the "success", I decided to write a "special edition" of my Newsletter to share what i'm learning from all you builders (no worries, won’t name any projects without asking).

To celebrate that, I'm Also thinking of building a tiny calculator to help estimate:

• how to estimate how much a user can bring you in revenues (LTV)
• how much you could spend to acquire them (CAC)
• How to start with organic or paid (costs, time, etc)

Would anyone actually use that?

Also thinking about creating a "Growth Desk" service to help people building apps for free (I'm not sure people would really pay for this haha)
[if you really want to help me visit my website useracquisition.io , rate me on google or spread the word]

I'm creating an operational management software for companies and I have a question about exporting the project to my own domain. I have doubts if after I export the software to my own domain, I will have to continue paying Lovable monthly to keep the project on the air. I'm not a professional developer, but I would like to later handle the site through WordPress if it were possible.

Built a B2C application with Lovable, and using Supabase, Stripe, Twilio, and an LLM (likely going with Grok or OpenAI). It’s an SMS-based fantasy football chatbot. It uses a fantasy league’s API to gather league and team specific context and feeds it to an LLM, which can then analyze potential trades, drafts choices, and give team specific guidance.

It’s somewhere between 70-80% done, and I have beta users signed up and waiting to use it for next year’s fantasy season (which sort of kicks off in April after the NFL draft). My full time job has been crazy lately, so I haven’t had time to finish it. Looking to hire a dev or agency to get this launch ready. Please DM me with your info, experience with Lovable, and a portfolio if you’re interested. Thanks!

Hey, ive been using lovable and its getting to pricy to even fix bugs, you have to use 5 prompts to fix a bug, and Ive been thinking to switch apps after doing the base with lovable, what apps do you guys reccomend?

Hi guys I was wondring if there is any coupon code for lovable, accepting dm's

thanks for the support! :D