Rating certificate · AW/26-09/10626 Sept 2026
74of 100
The Register / Coding agents / Lovable
Register entry · Coding agents · updated 26 Sept 2026
Lovable
Lovable turns chat prompts into working web applications, with built-in hosting (Lovable Cloud), database, auth, payments and a growing catalogue of connectors. Projects can be synced to GitHub, GitLab or Bitbucket. It targets non-developers and product teams, and added iOS/Android apps in April 2026, a public API and Slack/Telegram chat access in August-September 2026. It is closed source and billed by credits.
What reviewers and users praise
- Fast route from idea to a hosted app with login and database for non-coders (HN user, Aug 2026; BuildFastWithAI review)
- Outputs a conventional React + Supabase codebase that a developer can take over (reviewers)
- Very high release cadence: dozens of dated changelog entries in the last 90 days
What they criticise
- Credit consumption is hard to predict; debugging loops burn credits (Preuve review; Reddit r/lovable threads)
- Generated apps can be insecure or poorly architected unless reviewed (McKelvey review; HN comments)
- Platform security incidents: CVE-2025-48757 (May 2025) and the Feb-Apr 2026 public-project exposure
Experts vs the crowdneeds both scores
Experts64
Crowd—
| Price | Free, paid from $25 |
|---|---|
| Use it via | Web app, Mobile app, API, MCP server, Chat apps |
| Runs on | web |
| Licence | proprietary |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Coding agents: adoption 35%, experts 40%, crowd 25%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 35% | 85 | Reported users 8M → 79 · 54 releases in 90 days → 100reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 40% | 64 | 4 independent reviews (2 positive · 2 mixed · 0 negative), averaged toward 50 for small samples. |
| Crowdcommunity sample · weight 25% | — | Only 5 community items sampled (6 needed) |
| Rating | 74 | Provisional: low confidence (2 of 3 pillars, 5 community posts). |
Evidence checks. 5 items removed: search-engine results page (5). 1 post over the three-per-thread limit not counted. How evidence is checked.
Editorial adjustment. Incident-history re-grade under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: B.
B
Permission model
The agent works in a vendor-hosted project environment, not on the user's machine; edits apply automatically by default, with an opt-in Plan mode and explicit user action required to publish. Workspace roles govern viewing, editing, approving and publishing. Agent-permission settings added Sep 2026. Rubric fit is approximate for a cloud builder. source
A
Data access scope
Each workspace and project is logically separated; permissions are role-based and enforced server-side; connectors support per-user access. source
B
Data storage
Cloud-hosted; Lovable Cloud supports regional hosting in the EU, US and Asia Pacific and data stays in the selected region by default. Code can be exported via Git sync. source
C
Data retention & training
Business/Enterprise content is not used for training; Free/Pro users must turn off 'Use my Lovable content for model training' (opt-out). No stated retention period found. source
D
Incident history (24 months)
Two serious platform-level incidents within 24 months: CVE-2025-48757 (missing RLS in generated apps, 170+ apps exposed) and a Feb-Apr 2026 regression that exposed public projects' source code and chat history to any Lovable user. Both addressed, but repeated. Regraded from D: Revision 2 review: the Feb-Apr 2026 regression exposed public projects' source code and chat history for about 11 weeks, and the first public response denied a leak. That is a slow, initially undisclosed fix, which grades D; C was applied in error. source
A
Compliance
SOC 2 Type 2 (as of 2025-08-13) and ISO 27001:2022 certified; public trust center at trust.lovable.dev. source
B
Transparency
Closed source with a detailed, near-daily public changelog and documentation. source
The experts
4 named independent reviews found; dated reviews from the last 12 months are scored.
- mixed
Buy it, use it for what it's for, and schedule the review you're planning to skip.
Justin McKelvey (fractional CTO, repairs vibe-coded codebases; states no affiliate relationship) · 29 Aug 2026 · justinmckelvey.com - positive
For prototypes, internal tools, and non-coders shipping real software, it is excellent.
Build Fast with AI · 13 Aug 2026 · blog.buildfastwithai.com - mixed
Lovable is an impressive building tool... what holds it back is the credit unpredictability
Vincent, founder of Preuve AI (idea-validation tool, discloses bias; not an app builder) · 15 Aug 2026 · preuve.ai - positive
The most non-technical-friendly builder and the best default if you want the backend handled.
Matt Graham, founder of RapidDev (development agency that builds on these platforms) · 1 Sept 2026 · rapidevelopers.com
The crowd
5 coded posts from hackernews.
2 positive0 mixed3 negative
- positive
It's cut HOURS out of my week, and it's all software I could not have afforded to pay developers for. But with Lovable, just describe it and iterate.
HN thread 'GPT-6 Sol and Luna' · 22 Sept 2026 · news.ycombinator.com - negative
If you don't understand what you have the LLMs actually build, then there is no way you can maintain it or debug it if something goes wrong.
HN thread 'Explaining to business people why building software is still hard' · 22 Sept 2026 · news.ycombinator.com - positive
Yes, I used Claude Code a lot, but Lovable is the fastest way to get a log-in system and database, so a great option for a true MVP.
HN thread 'Lovable raises $400M Series C' · 12 Aug 2026 · news.ycombinator.com - negative
lovable built some absolute monstrosity with cloudflare workers - every page view incurred a call to Wordpress, no proper caching and it was slow as hell.
HN thread 'Lovable raises $400M Series C' · 12 Aug 2026 · news.ycombinator.com - negative
I think Lovable is a very dumb product and that virtually anyone of any level of technical knowhow would be better served by using normal agents or perhaps Replit
HN thread 'Lovable raises $400M Series C' · 12 Aug 2026 · news.ycombinator.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Free | Free | 5 daily build credits (up to 30 a month), 20 monthly Cloud credits, 4 AI-feature credits |
| Pro | $25 / monthly | Credit-based; price taken from third-party pricing summaries dated June-August 2026 because the vendor price table did not render for our fetch; top-ups $15 per 50 credits |
| Business | $50 / monthly | SSO, training excluded by default; price from third-party summaries (June 2026); top-ups $30 per 50 credits |
| Enterprise | Custom | Volume-based credit pricing |
Recent changes
- 23 Sept 2026
Company said annualized revenue passed $600M (HumanX); changelog adds Claude models for app AI features and AWS/Azure/GCP connectors source
- 17 Sept 2026
Lovable API for workspace automation source
- 12 Aug 2026
Raised $400M Series C at a $13.3B valuation source
- 31 Jul 2026
Opt-out of AI model training exposed as a setting on all plans source
- 28 Apr 2026
Launched iOS and Android apps source
Ranked alongside
Other ranked entries in Coding agents.
OpenCodeAnomaly75
Claude CodeAnthropic73
Zed (Agent Panel)Zed Industries73
GitHub CopilotGitHub (Microsoft)72
Codex (CLI and app)OpenAI71
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.