40 articles · newest first
Pick by where you're starting, not by a ranking. Lovable, Bolt, v0 and Replit build and host the app for you; Cursor and Claude Code work on code you keep. What each one's free plan really gives and what the first paid plan costs, read on each vendor's own page on Nov 3, 2026.
Aliteq Team · · 8 min
Lovable turns a plain-English description into a working web app and hosts it. What it costs on Lovable's own pricing (free, or Pro from $25 a month on Nov 3, 2026), who owns the code and data under its Terms, the training opt-out most new users miss, and how to take your app with you.
Aliteq Team · · 8 min
Vibe coding in Google AI Studio's Build mode costs nothing, and eligible accounts can publish two full-stack apps without a billing account. The catches are in Google's own docs: which Gemini models are free, the shared database quota, who pays for your visitors' AI calls, and what Google does with free-tier prompts.
Aliteq Team · · 9 min
Not most apps, but more than half of the Supabase apps a scanner could reach. The real numbers behind the headline, read on the reports' own pages, and the two-minute check that tells you whether your Lovable, Bolt or v0 app is one of them.
Aliteq Team · · 9 min
GitHub says the fix for "it looks right but doesn't quite work" isn't a better prompt, it's a spec. Here's what spec-driven development means in plain words, and a one-page template you can use in any builder.
Aliteq Team · · 7 min
For vibe coders whose Lovable app works but keeps hitting walls: you may not have to leave at all. What Lovable, Cursor and Claude Code each cost per month on their own pricing pages (read Nov 3, 2026), the Cursor price change most comparisons miss, and what breaks when you open a Lovable app somewhere else.
Aliteq Team · · 9 min
Two words or one? And what do "agentic engineering," "context engineering" and "spec-driven development" actually mean? A plain glossary of every AI-coding term in circulation, each with who coined it and when.
Aliteq Team · · 6 min
Vibe coding means describing an app in plain English and letting AI write the code. Yes, people who don't code ship real, live apps this way. What the term really means (in its inventor's own words), what you can build for free today, and the one part no tool does for you.
Aliteq Team · · 8 min
Claude Code starts at $20 a month on Claude Pro, Lovable and Bolt at $25. The price is close; the job isn't. Here's what each one actually gives a non-coder, what you'd pay in total, and the signs you're ready to switch, from Anthropic's, Lovable's and Bolt's own pages read Nov 3, 2026.
Aliteq Team · · 8 min
"From vibe coding to agentic engineering" is one of the fastest-rising searches of 2026. The honest difference between the two terms is smaller — and more useful — than the jargon makes it sound.
Aliteq Team · · 7 min
In late September, DHH told a room of 1,200 developers that writing code by hand is now the exception. If you build apps by describing them to Lovable or Bolt, here's what actually changed for you — and what didn't.
Aliteq Team · · 7 min
You built it by describing it to Lovable, Bolt, Cursor, Replit or v0 — the hard part's done. This is the map of the rest: understand what the AI built, fix the errors you'll Google, ship it so strangers can't break it, and handle the day a real customer shows up.
Aliteq Team · · 9 min
Yes, if it's the anon (publishable) key and Row Level Security is on for every table. Supabase built that key to be public. The one that must never show up in a browser or a repo is the secret (service_role) key. How to tell which one you found in 10 seconds, and what to do if it's the wrong one.
Aliteq Team · · 6 min
It was snappy with ten rows and crawls with ten thousand. Almost always it's one of three things — a missing index, fetching everything then filtering in the browser, or no caching — and none needs you to read code.
Aliteq Team · · 6 min
It means Row Level Security is on and no policy lets this write through. The four things that cause it in Lovable, Bolt and hand-built Supabase apps, the exact SQL that fixes each one, and why "just disable RLS" is the wrong answer. Checked against Supabase's own docs on Nov 3, 2026.
Aliteq Team · · 8 min
Before you share a Replit app, six things to check so strangers can't read each other's data or run up your bill — including the one backup check behind Replit's most infamous 2025 data-loss story.
Aliteq Team · · 7 min
v0 turns a prompt into a real Next.js app on Vercel — but who's allowed to see your data is a setting you have to confirm. Six things to check before you ship, starting with the one Next.js setting that quietly puts keys in the browser.
Aliteq Team · · 7 min
Cursor works in the project you bring, and what that project connects to is your call — so every security check is yours. Six things to confirm before you ship, and the one (reading the code) that matters most.
Aliteq Team · · 7 min
Bolt built it and its scan catches two of the big risks — but four checks are still yours before you share the link, so nobody can read each other's data or run up your AI bill.
Aliteq Team · · 7 min
Lovable scans your app when you publish, but its own docs say findings don't block publishing by default and the scans can't guarantee security. The six things to check first, where each one lives in Lovable, and how to test them without reading code. Checked on Lovable's docs Nov 3, 2026.
Aliteq Team · · 9 min
Ninety percent of "it's tiny on mobile" is one missing tag. Here's "make this page work on phones" three ways, with the real code — from a lonely media query to a proper mobile-first layout.
Aliteq Team · · 6 min
A naive "send a daily email" loop fires at the wrong time, breaks on one bad address, and can email someone a hundred times. Here's the request three ways, with the real code, and the guards that keep you off spam lists.
Aliteq Team · · 6 min
Row Level Security is deny-by-default, so the danger isn't forgetting to lock a table — it's a lazy policy that quietly unlocks all of them. Here's the request three ways, with the real SQL each produced.
Aliteq Team · · 6 min
The naive way to vibe-code a Stripe button puts your secret key in every visitor's browser. Here's the same request three ways, with the real code — and the one rule that separates a demo from a safe checkout.
Aliteq Team · · 6 min
Every vibe coder types "add login with Supabase" and gets working code. Here's what changes when you ask for it vaguely, specifically, and with the guardrails spelled out — with the real code each version produced.
Aliteq Team · · 6 min
Most AI tools let you pick a model, and the wrong pick burns time and money. When a fast, cheap model is plenty, and when a slow, thinking one earns its keep.
Aliteq Team · · 5 min
The vibe-coder trap is fixing AI code until it's a knot. When a clean rewrite wins over another patch, shown with a real before-and-after and a simple rule for deciding.
Aliteq Team · · 5 min
You don't need to write code to vibe code, but you do need to read it. Three things to look for in a diff — logged secrets, scope creep, silent data changes. Try reading one.
Aliteq Team · · 5 min
The habit that separates people who ship safe apps from people who ship bugs: generate, then ask the model to break what it just wrote. Shown with a real before-and-after.
Aliteq Team · · 5 min
The single biggest upgrade to vibe coding is treating a prompt as a spec. See the same request go vague → specific → constrained, with the real code each version produced. Try building one.
Aliteq Team · · 5 min
A rate limit caps how many requests someone can fire in a window, so bots, bugs and abuse can't swamp your app or your bill. Why every public endpoint needs one. Tap to watch it hold.
Aliteq Team · · 4 min
What happens to a vibe-coded app when it suddenly gets popular, the two ways to handle it, and why "works for ten" isn't "works for ten thousand". Tap to add users.
Aliteq Team · · 4 min
Why a vibe-coded app should push slow work to a background job instead of freezing the user, and how queues keep an app responsive when traffic spikes. Tap to load it up.
Aliteq Team · · 4 min
A cache keeps a ready-made copy so pages load instantly — most of the web's speed, and the classic bug where old data won't go away. What its lifetime (TTL) controls.
Aliteq Team · · 4 min
Latency is the wait between a request and its answer, and distance is the biggest cause. Why far-away users feel the lag, and the one thing that fixes most of it. Tap the ladder.
Aliteq Team · · 4 min
When a vibe-coded app suddenly fails, the error log is the first place to look. How to read one, and why "it just broke" almost never means what it says.
Aliteq Team · · 4 min
What a file actually is, why its type matters, and how it differs from memory that forgets the instant the power goes off.
Aliteq Team · · 4 min
The CPU does the actual work while you vibe code. The tiny fetch-decode-execute loop it runs, how it differs from a GPU, and why it's where speed and cost come from.
Aliteq Team · · 4 min
RAM is the desk your computer works on: fast, and wiped the moment the power's off. Why a busy app runs out, how it differs from storage, and how it relates to a GPU's VRAM. Tap to see it fill.
Aliteq Team · · 4 min
A program is just an ordered list of exact steps — no magic, no guessing. Tap "run" to step through a tiny one and watch it happen.
Aliteq Team · · 4 min