Company
Swedish startup behind an AI-native app-builder platform that lets users generate and deploy full web applications from natural-language prompts.
Lovable's shared credit balance puts an app with paying users and an AI feature at $100 to $115 a month, developer Aakash Verma estimates. The figures are illustrations built from list prices, and Verma's firm sells a database migration for apps shaped like that one.
Reality
Ramp built Glass, an internal vibe-coding platform where non-engineers make apps on connected company data, the Pragmatic Engineer newsletter reports. Stripe's comparable tool, Harbor, took one engineer about six weeks. Connector access is the open question.
Reality
Lovable has billed hosting and its built-in backend from the same credit balance as prompts since June 1, 2026. A dev.to guide reports that an empty balance pauses the backend and locks users out of the deployed app.
Reality
The 5 billion euro fund the European Commission set up and EQT manages has made its first healthcare investment, in a Stockholm company whose three modules each carry Class IIa device certification. The valuation was not disclosed.
Perspective Coverage
4 publishersReality
One developer moving a 99-table SaaS off Supabase Cloud saw all 228 row-level security policies fail silently until auth.uid() moved with the database. Any app that queries Postgres from the browser has to bring its auth and session layers across in the same cutover.
Reality
Matt Palmer's scan found 170 of 1,645 Lovable showcase apps leaking data through inadequate Row Level Security, the same kind of gap Wiz found at Moltbook. Before launch, an AI-built app needs a review that tests the database rules behind its public key.
Reality
OpenAI now lets ChatGPT Plus and Pro subscribers spend their plan allowance inside tools from 16 launch partners, including Amp and Devin, via Sign in with ChatGPT. The model cost moves to the subscriber's plan, while tools like Dactyl keep billing credits for builds and assets.
Reality
Detectify found 86% to 97% of open critical and high flaws on 1,293 customers' internet-facing systems had been exposed for more than 90 days. Its scanner confirmed each with a working attack request, so these are known, reachable flaws left to age.
Reality
Two Smartly.io veterans have $13M and a thirteen-person team to replace the Salesforce-plus-tools stack with background agents, and they are chasing Attio and Clay while both sit on far larger war chests.
Reality
Recorded Future says filtering, verification and training still blunt most AI phishing, with deepfaked voice and video the exception. Its advice is to stop treating a familiar face or voice on a call as proof of identity.
Reality
RevenueCat finds apps launched since 2025 share 3% of subscription revenue while launches run at 14,700 a month. AI-written code has moved the hard part of a new app to finding paying users, though some of that gap is only because younger apps have had less time to build up renewals.
Reality
Anthropic's Claude Marketplace is live with more than 2,000 connectors and plugins, including ones published by Atlassian, Google, Microsoft and Salesforce. Each connector enabled from it adds a supplier that belongs in third-party and access reviews.
Reality
Microsoft is splitting Copilot into Home, Code and Autopilot, with its always-on Autopilot agent entering private preview in late September. Autopilot agents carry their own identities and bill by usage, so tenant admins need access reviews and spend plans ready before the first instances arrive.
Perspective Coverage
5 publishersReality
McAfee says the WeedHack stealer's control server is dead and its renter dashboard gone, but ten impersonation sites and the search rankings behind them are still delivering victims.
Perspective Coverage
3 publishersReality
Microsoft put Copilot Managed Runtime into public preview, hosting code from three Copilot builders and third-party tools like Lovable inside the M365 tenant. For security teams the launch is a policy job over who may deploy code that reads tenant data.
Reality
A single operator is distributing fake "desktop apps" for three US payroll platforms that have no desktop product. Each installer silently sets up ScreenConnect for unattended control of the payroll operator's machine, Allure Security found.
Reality
OJ moves the file watcher, module graph and hot updates into a Rust binary and starts Node only for plugins. Lovable reports median sandbox acquisition dropping from 14.5 seconds to 3 seconds, and Vite's creator calls the headline cold-start benchmark somewhat misleading.
Reality
Stripe says its top AI customers grew 175% in 2026, up from 120% a year earlier, with 48% of revenue earned outside their home markets. Whether that breaks the rule that B2B growth slows with scale depends on how Stripe picked the group.
Reality
Fabian Hedin, Lovable's CTO, said two-thirds of the Fortune 500 use the tool because staff found it themselves, and put current revenue at $600m. The permissions work starts after the apps are running.
Reality
Claude Marketplace groups connectors, partner products and consultants in one catalog, and eligible customers can direct part of an existing Anthropic commitment at the software listed there.
Reality
Product · September 6, 2026 · One report1 publisher
Product · August 21, 2026 · Confirmed3 publishers