惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Application and Cybersecurity Blog
Application and Cybersecurity Blog
A
About on SuperTechFans
S
SegmentFault 最新的问题
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Help Net Security
Help Net Security
有赞技术团队
有赞技术团队
博客园 - 【当耐特】
O
OpenAI News
美团技术团队
月光博客
月光博客
Apple Machine Learning Research
Apple Machine Learning Research
Schneier on Security
Schneier on Security
Webroot Blog
Webroot Blog
Cyberwarzone
Cyberwarzone
Hacker News - Newest:
Hacker News - Newest: "LLM"
Google Online Security Blog
Google Online Security Blog
T
Tenable Blog
S
Security Affairs
博客园_首页
S
Schneier on Security
Security Latest
Security Latest
T
Threat Research - Cisco Blogs
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
Spread Privacy
Spread Privacy
量子位
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
K
Kaspersky official blog
Hugging Face - Blog
Hugging Face - Blog
TaoSecurity Blog
TaoSecurity Blog
博客园 - 聂微东
Vercel News
Vercel News
M
MIT News - Artificial intelligence
T
Troy Hunt's Blog
B
Blog
MongoDB | Blog
MongoDB | Blog
Martin Fowler
Martin Fowler
Attack and Defense Labs
Attack and Defense Labs
L
LINUX DO - 最新话题
D
DataBreaches.Net
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
Stack Overflow Blog
Stack Overflow Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
博客园 - Franky
W
WeLiveSecurity
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
F
Fortinet All Blogs
www.infosecurity-magazine.com
www.infosecurity-magazine.com
C
Check Point Blog
H
Hacker News: Front Page

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Almost anyone can build an App in 2026, but here's the part nobody mentions
Singaraja33 · 2026-05-22 · via DEV Community

When anyone starts trying to vibe code on a project for the first time, it's quite typical that after typing something like "build me a project management app with a nice dashboard and user authentication" they become amazed on how with just such a simple prompt they can see in front of their eyes a fully functional application assembling itself. And not only that, but also the app buttons work, the overall layout looks clean and they can actually click around in it quite properly. The whole thing took just a couple of minutes and without the need of writing a single line of code.

That feeling is now happening, it's real and the market has rewarded it if we just look at the numbers and realise that vibe coding tools have attracted over a billion USD in venture capital in 2025 alone. Lovable, a well known platform we've written about before and that was funded by a simple Nordic young guy, hit 200 million USD in annual recurring revenue. Cursor's parent company was valued at 9,2B USD, with Bolt hitting 2,1B. With this data at hand, we can clearly see that these are not just experimental tools with a handful of geeky users.

As we approach the end of May 26, in this exact moment approx 60% of vibe coding users are not developers. So yes, as mentioned in the title, almost anyone can build an app now, but the question that we hear less often is: What kind of app exactly? What happens at the parts the demos never show?
Let's start by giving credit to the sides that deserve it, because the capabilities are impressive in ways that of course matter a lot.

To start with Bolt.new, this platform runs entirely in the browser through WebContainers technology that requires no installation, no local setup and even no terminal. You simply describe an application in plain English or Spanish and it generates and runs the code live. Designers who have never opened a terminal are building prototypes in it right now.

v0 from Vercel had 2 million users generating React components and full landing pages from just text descriptions by the first quarter of this year alone. Lovable targets full stack web application generation with Supabase as the default backend, and has become the mandatory tool for people who want to test an immensely valuable thing as whether an idea is worth pursuing before spending money on a development team.

The productivity numbers for experienced developers using these tools are also real, with some statistics saying that AI coding tools have boosted individual developer output by almost 80% on average, measured by lines of code shipped. GitHub Copilot now has around 2 million paid subscribers and 20 million total users, and approximately 40% of all code written in the world today has become AI generated.

The workflow used by many in the industry is also quite common, with most starting with Bolt or Lovable to prototype fast, and then moving to Cursor or Claude Code for production level refinement. And this is absolutely changing how software gets built today, in ways unimaginable just a few years ago.

All those tools and ways of coding have brought to a way easyer, much quicker and incredibly cheaper reality things like rapid prototyping, idea validation and internal tools. And that is a meaningful democratization and definitely not hype.

Now, having said all of that, we should also explain the part that the product walkthroughs reliably skip, and we should understand that getting from 0 to 90% of an app might be quite easy with vibe coding, while getting from 90% to 100% (handling edge cases, authentication that doesn't have vulnerabilities, payment processing, real deployment, production database design, or error states for every scenario a real user will eventually stumble into) is where things get complicated in ways that simple prompts don't easily resolve.

Karpathy himself, the man who actually invented the term "vibe coding" and is maybe among the most technically capable person you could imagine using these tools, discovered this very early when right after building his own app with vibe coding, he wrote that it was "exhilarating and fun as a local demo but a bit of a painful slog as a deployed, real app". So if Andrej Karpathy himself finds the last 10% a challenging part, it's worth sitting with that for a moment.

The security picture is also worth looking at, and just about a year ago, in May 2025, a study found security vulnerabilities in 170 out of 1.645 apps built with Lovable (apps that real users were actually using and trusting with their data), and some critical security flaws were also identified on Lovable's generated code. These are not random and lonely cases, but are more of a structural consequence of using tools that optimize for getting something working quickly rather than getting something secure reliably, and we should be aware of that.

Several developers who have tested these platforms on stress and at scale have also noted the same pattern, reaching to the conclusion that vibe coded apps work fantastically well for prototypes but "have patterns you will regret at scale" They basically experienced that the code that gets you to a demo often makes your life way harder when you try to grow beyond it. Not because the app is bad, but because it was simply not designed with growth in mind, it was designed to exist.

Very interestingly, a study published mid last year found that while AI coding tools boosted average developer output by 76%, experienced developers using AI assistance were paradoxically 19% slower than when they worked without it (even though those same developers believed they were working 20% faster, according to the study)
The explanation for this is what actually matters, because it was found out that those experienced developers knew when the AI had gotten something essentially wrong. When that happened, they just stopped, backtracked, rethinked the structure and catched the vulnerability before it shiped. And it was that process of oversight and correction that was taking a lot of time, a time that didnt show up as productive in metrics but absolutely shows up in whether the application works correctly in production.

This paradox captures something essential about what expertise actually does in software development, because it clearly shows that it is not primarily about being able to write code, but about knowing when the code is wrong, why it is wrong, what the consequences of that wrongness will be six months from now and how to fix it in a way that doesn't create three new problems. A non technical user prompting Lovable has no mechanism to do that check because he lacks expertise, and when they see something that appears to work they just ship it. The problems arrives later in security audits, in production failures, in scaling walls and in technical debt that accumulates invisibly until it becomes impossible to ignore.

The honest synthesis and the conclusion we can extract from all the above is that vibe coding tools have created a true new capability tier that didn't exist only three years ago. Today, a small team or even a single person with limited technical experience can build and validate a product idea at a speed and cost that previously required a full engineering team, and that matters a lot for founders, for product teams or for internal tooling at companies that can't justify a dedicated developer or a team of developers. But that capability tier has a ceiling, and that ceiling arrives at the moment when the product starts to matter, when real users are depending on it, when security vulnerabilities have real consequences and when the architecture decisions made in the first minutes sprint start constraining everything that follows.

We live in a tech phase where the companies that use vibe coding tools most effectively treat them for just exactly what they are, basically extraordinary tools for speed and validation, but not replacements for engineering basis. Those companies know that the prototype gets built fast, but then it must be the professionals the ones who arrive to evaluate whether the foundation is worth building on, refactor what needs refactoring, harden what needs hardening and design the system that will actually scale.

This is also, frankly, why specialized software development companies have never been more relevant rather than less. The market is now full of beautifully looking products built by excited non technical teams who got to 90% faster than ever before and are now staring at the 10% that requires actual expertise. And the demand for that expertise at the moment, applied to real production systems, is actually higher than it has ever been.

For development firms that know what they're doing, the era of vibe coding is not a threat but a pipeline, and many creative entrepreneurs can today just set up very quick and cheap companies to develop apps at very low costs and relying on experienced subcontractors for the more technical side of their initiatives.

As a brief of the above explained tools, we could brief as follows:

1- For non technical guys or teams out there validating an idea, Lovable and Bolt.new are the clearest starting points. Both run in the browser, require no setup and can produce functional full stack applications from natural language descriptions within minutes. Lovable handles more complex app generation and Bolt prioritizes raw speed and is excellent for proof of concept work.

2- For teams with some technical experience who want AI assistance in a real development environment, then Cursor is the most interesting tool, valued at around 9 billion for reasons that are obvious the first time you use its Composer feature on a complex codebase.

3- GitHub Copilot remains the most widely adopted AI coding tool overall, with so many people around the globe as paid subscribers and integration across every major IDE.

4- For frontend and UI generation specifically, v0 from Vercel produces React components of a quality that impresses even experienced frontend developers.

And for anything that will carry real user data, handle payments, operate at scale or be built to last beyond the initial prototype phase, our strong recommendation is to keep bringing in people who have done it before, because the most clear thing the vibe coding era has clarified is not that developers are becoming obsolete, but that getting something working and getting something right are still two meaningfully different things. One of them is now much faster than it used to be, and the other still takes what it always took. Time and knowledge.

Vibe Coding, la nueva forma de desarrollar software

GPT Images, designing without designers

Translock IT
Luis Yanguas Gomez de la Serna