- Benmore Brief
- Posts
- Can AI really build your app? Vibe coding, explained
Can AI really build your app? Vibe coding, explained
What actually happens when you type one sentence and get an app, what these tools are built on, and where they break.
Type one sentence, get an app
That's the promise of vibe coding, and the money is real: Lovable is valued at $13.3 billion, Replit at $9 billion, and Anthropic said Claude Code alone was bringing in more than $2.5 billion a year by February 2026. So what is actually happening when you hit enter?
First: what an app is made of
Picture a restaurant. Every vibe coding tool is a different way of putting the same restaurant up for you.
Frontend is the dining room: everything a customer sees and touches.
Backend is the kitchen: where the real work happens, out of sight.
Database is the pantry: every customer, order and booking, stored on shelves.
Auth is the host at the door, and the access rules are the locks on the pantry shelves.
Hosting is the building, rented from a company like AWS, Google Cloud, Cloudflare or Vercel.
Domain is the street address on the sign.
What each tool is really built on
Lovable: Anthropic's Claude models, plus Lovable's hidden instructions and a starter template, plus a React app, a cloud preview, Lovable Cloud (built on Supabase) and hosting on Cloudflare.
Bolt: runs your app inside your own browser tab. Its cloud was built with Netlify and Supabase.
v0 (Vercel): Next.js, a cloud sandbox preview, one-click hosting on Vercel and one-click Supabase.
Replit: a whole cloud workspace on Google Cloud. Its agent plans, builds and tests in a real browser, with separate development and production databases.
Claude Code (and Cursor, Codex): a different kind of tool. It's an AI engineer working on your own code, on your own computer. No built-in hosting or database: you choose.
Where they break
AI gets you about 80% of the way. The last 20% is where your customers' data and money live. Three real cases:
Missing access rules left 170 of 1,645 Lovable apps leaking data (2025).
Replit's agent deleted SaaStr's production database during a code freeze (July 2025).
Moltbook left its database key in its own website code (2026).
Five signs you need engineers
It holds people's personal information, or takes payments.
It needs to connect to the systems you already run.
The rules are complicated.
Compliance.
It has to last.
Free checklist: 10 questions before real users touch your app. Run it on anything built with Lovable, Bolt, v0 or Replit before you put customers on it.
Built a prototype and need it made real? That's what Benmore does. Just reply to this email.