Going live with a vibe-coded app? Start here.
Each AI-building tool ships with its own predictable gaps. Pick yours for the mistakes that bite when real users and real data show up — and how to catch them before launch.
Lovable
Lovable ships a working React + Supabase app fast — and a predictable set of security gaps that never show up in the preview. The common Lovable launch mistakes, and how to catch each one.
Read the guide → Going-live guideReplit
Replit gets you from idea to a running, public app fast. The Replit-specific things to check before real users: secrets, Repl visibility, the database, deployment, and stubbed auth.
Read the guide → Going-live guideBolt
Bolt.new builds a full-stack app from a prompt in minutes. The speed is real — and so are the exposed keys, open backend rules and missing server-side checks. What to fix before launch.
Read the guide → Going-live guideCursor
Cursor writes whatever you ask — including the security shortcuts. The patterns to watch when you build with Cursor and head for production, and how to catch them before launch.
Read the guide →Built with something else (v0, Claude, Base44, Bubble…)? The six areas a senior engineer reviews apply to any stack — start with the free 2-minute self-check.