company
Swedish startup behind an AI-native app-builder platform that lets users generate and deploy full web applications from natural-language prompts.
No evidence-backed relationships are recorded.
One developer moving a 99-table SaaS off Supabase Cloud saw all 228 row-level security policies fail silently until auth.uid() moved with the database. Any app that queries Postgres from the browser has to bring its auth and session layers across in the same cutover.
Reality
Matt Palmer's scan found 170 of 1,645 Lovable showcase apps leaking data through inadequate Row Level Security, the same kind of gap Wiz found at Moltbook. Before launch, an AI-built app needs a review that tests the database rules behind its public key.
Reality
OpenAI now lets ChatGPT Plus and Pro subscribers spend their plan allowance inside tools from 16 launch partners, including Amp and Devin, via Sign in with ChatGPT. The model cost moves to the subscriber's plan, while tools like Dactyl keep billing credits for builds and assets.
Reality
Detectify found 86% to 97% of open critical and high flaws on 1,293 customers' internet-facing systems had been exposed for more than 90 days. Its scanner confirmed each with a working attack request, so these are known, reachable flaws left to age.
Reality
Two Smartly.io veterans have $13M and a thirteen-person team to replace the Salesforce-plus-tools stack with background agents, and they are chasing Attio and Clay while both sit on far larger war chests.
Reality
Recorded Future says filtering, verification and training still blunt most AI phishing, with deepfaked voice and video the exception. Its advice is to stop treating a familiar face or voice on a call as proof of identity.
Reality
RevenueCat finds apps launched since 2025 share 3% of subscription revenue while launches run at 14,700 a month. AI-written code has moved the hard part of a new app to finding paying users, though some of that gap is only because younger apps have had less time to build up renewals.
Reality
Anthropic's Claude Marketplace is live with more than 2,000 connectors and plugins, including ones published by Atlassian, Google, Microsoft and Salesforce. Each connector enabled from it adds a supplier that belongs in third-party and access reviews.
Reality
Microsoft is splitting Copilot into Home, Code and Autopilot, with its always-on Autopilot agent entering private preview in late September. Autopilot agents carry their own identities and bill by usage, so tenant admins need access reviews and spend plans ready before the first instances arrive.
Perspective Coverage
5 publishersReality
McAfee says the WeedHack stealer's control server is dead and its renter dashboard gone, but ten impersonation sites and the search rankings behind them are still delivering victims.
Perspective Coverage
3 publishersReality
Microsoft put Copilot Managed Runtime into public preview, hosting code from three Copilot builders and third-party tools like Lovable inside the M365 tenant. For security teams the launch is a policy job over who may deploy code that reads tenant data.
Reality
A single operator is distributing fake "desktop apps" for three US payroll platforms that have no desktop product. Each installer silently sets up ScreenConnect for unattended control of the payroll operator's machine, Allure Security found.
Reality
OJ moves the file watcher, module graph and hot updates into a Rust binary and starts Node only for plugins. Lovable reports median sandbox acquisition dropping from 14.5 seconds to 3 seconds, and Vite's creator calls the headline cold-start benchmark somewhat misleading.
Reality
Stripe says its top AI customers grew 175% in 2026, up from 120% a year earlier, with 48% of revenue earned outside their home markets. Whether that breaks the rule that B2B growth slows with scale depends on how Stripe picked the group.
Reality
Fabian Hedin, Lovable's CTO, said two-thirds of the Fortune 500 use the tool because staff found it themselves, and put current revenue at $600m. The permissions work starts after the apps are running.
Reality
Claude Marketplace groups connectors, partner products and consultants in one catalog, and eligible customers can direct part of an existing Anthropic commitment at the software listed there.
Reality
SaaStr's recap puts a completed sale at $1.35B against a $17.5B private mark. The same recap reports a $1B round at $10B for Instinct, a company priced near $50M pre-money in April.
Reality
Rune Kvist's startup wants to sell enterprises an audited, insured answer to who pays when an agent fails, and the round was announced in a podcast episode that names Cursor, Harvey, Lovable and ElevenLabs.
Reality
At Dreamforce, Anton Osika said the argument over letting non-engineers ship software is finished. His evidence is automatic vulnerability scanning on every change and connector rules that limit data by who is logged in.
Reality
The Series A led by Ribbit Capital takes AIUC's total funding to $55M, paying for quarterly audits of a standard that Cursor, Harvey, KPMG and four other named vendors certify against, and for a push up to frontier models.
Reality
Invest · September 15, 2026 · 1 publisher
Invest · September 15, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Invest · September 12, 2026 · 1 publisher
Build · September 9, 2026 · 1 publisher
Product · September 6, 2026 · 1 publisher
Product · September 2, 2026 · 1 publisher
Product · September 2, 2026 · 1 publisher
Product · September 2, 2026 · 1 publisher
Build · August 31, 2026 · 1 publisher
Invest · August 30, 2026 · 1 publisher
Product · August 29, 2026 · 1 publisher
Product · August 28, 2026 · 1 publisher
Leadership · August 27, 2026 · 1 publisher
Product · August 27, 2026 · 1 publisher
Leadership · August 26, 2026 · 1 publisher
Build · August 26, 2026 · 1 publisher
Invest · August 23, 2026 · 1 publisher
Product · August 21, 2026 · 3 publishers
Invest · August 21, 2026 · 1 publisher
Build · August 20, 2026 · 1 publisher
Product · August 18, 2026 · 1 publisher
Build · August 18, 2026 · 1 publisher
Product · August 17, 2026 · 1 publisher
Product · August 14, 2026 · 1 publisher
Product · August 14, 2026 · 1 publisher