Skip to content
All tool news

Tool desk · Updated daily

Tool news·Lovable·

Lovable Adds Secrets Overview to Security Center for Workspace-Wide Secret Management.

Lovable's new secrets overview gives teams a single view of secrets across all projects, with filtering, sorting, and credit-free scanning.

CW

Create With tool desk

1 source checked · 2 min read · 2 sections

ShareLinkedIn
Lovable Adds Secrets Overview to Security Center for Workspace-Wide Secret Management

Lovable has added a secrets overview to its Security Center, giving teams a single workspace-wide view of secrets across all their projects. The update addresses a common pain point for teams managing multiple apps: knowing which secrets exist, where they live, and whether they should still be there.

The new overview lets users sort secrets by age, filter by individual project, and identify secrets that may no longer be needed. It joins other security features in Lovable's Security Center, including dependency issue detection, database misconfiguration alerts, and code analysis.

Security Scanning Without Credit Cost

Lovable confirmed that scanning and fixing issues in the Security Center does not consume any credits, removing a potential barrier for teams that want to audit their security posture regularly. The no-cost scanning applies to all security features in the center, not just the new secrets view.

This approach contrasts with platforms that charge for security scans or bundle them into higher-tier plans. For teams building on Lovable, it means security audits can happen as often as needed without impacting the project budget.

Context for Compliance and Cleanup

The secrets overview is particularly useful for teams dealing with compliance requirements or technical debt. Secrets can accumulate quickly during development, especially when prototyping or experimenting with third-party APIs. Sorting by age helps surface old secrets that may have been forgotten or replaced, while project filtering makes it easier to audit specific apps.

Lovable has been expanding its security and governance features in recent months. The platform partnered with Aikido in March 2026 to offer affordable penetration testing for builders, and has published detailed guidance on building safe, scalable businesses on the platform.

The Security Center consolidates multiple security signals into one interface. Teams can now see dependency vulnerabilities, database configuration issues, code quality problems, and secrets in a single view, rather than switching between tools or running separate scans.

Security Center overview showing secrets, dependencies, and database checks
Security Center overview showing secrets, dependencies, and database checks

For teams using Lovable's workspace feature, the secrets overview provides a top-down view that wasn't possible before. Instead of auditing each project individually, teams can now assess their entire workspace at once and prioritize cleanup or rotation based on age, usage, or risk.

The update is available now to all Lovable users with access to the Security Center. No additional configuration is required; the secrets overview appears automatically in the Security Center dashboard for workspaces with active projects.

Sources

1 checked

How we cover tool news: Create With's tool desk drafts these reports with AI from the sources listed above and checks them against those sources before publishing.

Worth passing on?

ShareLinkedIn

Go deeper on Lovable

Related reading, watching and going.

Everything on Lovable →

The briefing

2 Jun 2026

AI Hackathon UK: Build Apps with No Code in 48 Hours

Join Create With's online & in-person AI hackathon June 2026. Learn vibe coding to build apps without technical skills. Supporting Brighton charities. Register now!

Read →

The briefing

19 May 2026

How to Migrate Your App from Lovable to Claude Code in 2025

Step-by-step guide to migrating your Lovable app to Claude Code. Learn how to move from Lovable's managed platform to a stack you own and control.

Read →

The briefing

12 May 2026

The Ultimate Cheap & Scalable Stack for AI Agent Development

Discover the latest AI agent tools and vibe-coded apps from No-Code Poland. Learn about Bubble's AI assistant, Lovable's security standards, and more.

Read →
36 min

Podcast

55. We're Back! Conference Recap, Running Events with AI & Self-Healing Apps

James and Kieran return to the Create With Podcast after their summer break to recap the 2026 Create With Conference in Brighton. They discuss how 550 attendees experienced workshops, a charity hackathon where functional apps were built in 30 minutes, and an innovative conference operating system built entirely with AI. The episode covers the latest developments in AI development tools including Anthropic's Fable model, scheduled tasks in Codex, and self-healing applications using PostHog.

Watch now ↗
29 min

Conference

AI Lets You Build Everything—Here’s Why You Still Never Launch

Tom Wesolowski, owner of NoCodeRefactoring.com, delivers a conference talk exposing how AI's ability to build anything has created a new problem: chronic overbuilding that prevents launches. Using a real marketplace project as a case study, he demonstrates how an 80% scope reduction transformed a stalled four-month development into a revenue-generating product launched in two weeks. The talk provides a practical framework for identifying the minimal viable customer loop and postponing everything else until real user demand validates the need.

Watch now ↗
34 min

Podcast

My Daughter Built a Website Business, Claude Design First Look & Going All-In on Cloudflare

James and Kieran discuss practical AI-powered development through real-world examples, including a seven-year-old building a website business with Claude Code voice mode, Anthropic's new Claude Design tool, API security challenges in the AI agent era, and Cloudflare's expanding AI infrastructure offerings. The episode covers hands-on experiences with vibe coding, emerging design tools, and the evolving landscape of AI-assisted development.

Watch now ↗

Latest tool news

What else changed this week.

All tool news
VercelDigest

What Vercel Shipped in Late October

Vercel shipped quicker static deployments, four AI Gateway models, more free domain choices and new CLI controls in late October. The changes cover developers testing sites…

Vercel

Vercel Adds Submit_feedback to Its MCP

submitfeedback is a new Vercel MCP tool that lets agents and harnesses send bug reports, friction reports and feature requests directly to the Vercel team. Feedback can include…

The Create With Briefing

Don't watch forty changelogs. Read one email.

Every Tuesday: the tool changes worth knowing, real business use cases, and what's on near you. Free, unsubscribe any time.