Skip to content
All tool news

Tool desk · Updated daily

Tool news·Lovable·

Lovable Introduces Live Penetration Testing Powered by Aikido AI.

Lovable now offers real-world security checks for apps using Aikido AI Pentest, with free fixes and a live session on April 2.

CW

Create With tool desk

1 source checked · 2 min read · 2 sections

ShareLinkedIn
Lovable Introduces Live Penetration Testing Powered by Aikido AI

Lovable has introduced a penetration testing feature that lets founders and builders test their apps against real-world attacks, not just theoretical vulnerabilities. The integration with Aikido AI Pentest marks a shift from static security scanning to active threat simulation.

The new workflow allows users to run an actual attack simulation against their Lovable app, then fix any discovered issues using Lovable's chat interface at no additional cost. The company is hosting a live session on April 2 to demonstrate how to break and fix apps using the new tooling.

From Scanning to Simulation

Traditional security scanning tools flag potential issues based on pattern matching and static analysis. Lovable's approach uses Aikido's AI-driven penetration testing to simulate how an attacker would actually exploit vulnerabilities. The system attempts real attacks against the running application, identifying weaknesses that might not show up in static code reviews.

Once the test completes, Lovable provides remediation suggestions directly in its chat interface. Users can implement fixes without leaving the platform, then re-run the test to verify the issue is resolved.

Lovable describes the feature as part of a broader push to help non-technical founders build production-ready apps. The company recently published a founder's guide to Lovable security, outlining best practices for securing apps built on the platform.

Free Fixes, Live Demo

The penetration testing feature is available to all Lovable users. Fixes generated by the platform are included at no extra charge, regardless of plan tier. The April 2 session will walk through the end-to-end workflow, from running a pentest to implementing and validating fixes.

Lovable has been positioning itself as a tool for building serious, scalable products, not just prototypes. Earlier this year, the company added file generation and data analysis capabilities, letting users analyze uploaded files and generate outputs like PDFs and spreadsheets without writing code. The security push builds on that narrative, addressing a key concern for founders considering whether to launch a business on a visual development platform.

Aikido specializes in AI-powered security testing for web applications. The partnership gives Lovable users access to enterprise-grade penetration testing without requiring security expertise or expensive third-party audits.

The April 2 session is open to all Lovable users. Details are available on Lovable's LinkedIn announcement.

Sources

1 checked

How we cover tool news: Create With's tool desk drafts these reports with AI from the sources listed above and checks them against those sources before publishing.

Worth passing on?

ShareLinkedIn

Go deeper on Lovable

Related reading, watching and going.

Everything on Lovable →

The briefing

2 Jun 2026

AI Hackathon UK: Build Apps with No Code in 48 Hours

Join Create With's online & in-person AI hackathon June 2026. Learn vibe coding to build apps without technical skills. Supporting Brighton charities. Register now!

Read →

The briefing

19 May 2026

How to Migrate Your App from Lovable to Claude Code in 2025

Step-by-step guide to migrating your Lovable app to Claude Code. Learn how to move from Lovable's managed platform to a stack you own and control.

Read →

The briefing

12 May 2026

The Ultimate Cheap & Scalable Stack for AI Agent Development

Discover the latest AI agent tools and vibe-coded apps from No-Code Poland. Learn about Bubble's AI assistant, Lovable's security standards, and more.

Read →
36 min

Podcast

55. We're Back! Conference Recap, Running Events with AI & Self-Healing Apps

James and Kieran return to the Create With Podcast after their summer break to recap the 2026 Create With Conference in Brighton. They discuss how 550 attendees experienced workshops, a charity hackathon where functional apps were built in 30 minutes, and an innovative conference operating system built entirely with AI. The episode covers the latest developments in AI development tools including Anthropic's Fable model, scheduled tasks in Codex, and self-healing applications using PostHog.

Watch now ↗
29 min

Conference

AI Lets You Build Everything—Here’s Why You Still Never Launch

Tom Wesolowski, owner of NoCodeRefactoring.com, delivers a conference talk exposing how AI's ability to build anything has created a new problem: chronic overbuilding that prevents launches. Using a real marketplace project as a case study, he demonstrates how an 80% scope reduction transformed a stalled four-month development into a revenue-generating product launched in two weeks. The talk provides a practical framework for identifying the minimal viable customer loop and postponing everything else until real user demand validates the need.

Watch now ↗
34 min

Podcast

My Daughter Built a Website Business, Claude Design First Look & Going All-In on Cloudflare

James and Kieran discuss practical AI-powered development through real-world examples, including a seven-year-old building a website business with Claude Code voice mode, Anthropic's new Claude Design tool, API security challenges in the AI agent era, and Cloudflare's expanding AI infrastructure offerings. The episode covers hands-on experiences with vibe coding, emerging design tools, and the evolving landscape of AI-assisted development.

Watch now ↗

Latest tool news

What else changed this week.

All tool news
VercelDigest

What Vercel Shipped in Late October

Vercel shipped quicker static deployments, four AI Gateway models, more free domain choices and new CLI controls in late October. The changes cover developers testing sites…

Vercel

Vercel Adds Submit_feedback to Its MCP

submitfeedback is a new Vercel MCP tool that lets agents and harnesses send bug reports, friction reports and feature requests directly to the Vercel team. Feedback can include…

The Create With Briefing

Don't watch forty changelogs. Read one email.

Every Tuesday: the tool changes worth knowing, real business use cases, and what's on near you. Free, unsubscribe any time.