Why your Lovable app works locally but fails in production
It runs perfectly in the preview and dies the moment you point a real domain at it. That is almost never a code problem — it is everything around the code that was never configured.
Continue ReadingAre Lovable apps secure? What the tool does and does not do for you
Lovable wires up Supabase Auth and gives you a working sign-in screen. What it does not do is enforce anything on the server, and that gap is where almost every real problem lives.
Continue ReadingYour API keys might be in the browser. Here is how to check in 60 seconds
You do not need a security consultant to find this one. Everything your site sends to a browser can be read by anyone using that browser, and it takes under a minute to look.
Continue ReadingLovable vs Bolt vs Replit Agent vs v0: what each one leaves you to finish
Every comparison of these tools comes down to what they build. The more useful question, once you are trying to launch, is what each of them does not build.
Continue ReadingWhat it costs to make an AI-built app production-ready
Nobody can quote this honestly without looking at your code first. What can be explained honestly is what drives the number up and down.
Continue ReadingThe pre-launch checklist for AI-built apps
Twenty-three things to check before real people use your app. Most take under a minute, none needs a developer, and the first six are where the serious problems live.
Continue ReadingSupabase Row Level Security, explained for people who did not write the SQL
Everyone tells you to "turn on RLS". Almost nobody explains what it is, why it is off by default, or how to tell whether the policy you added actually protects anything.
Continue ReadingThe login screen that is not a login
Your app has a sign-in page, users have passwords, and it all works. That does not mean anything is protected. The screen and the enforcement are separate problems.
Continue ReadingBolt.new app will not deploy: where to actually look
Bolt runs your project inside the browser, which is genuinely clever and also the reason the first real deploy behaves differently from what you saw.
Continue ReadingShould you fix your AI-built app, or rebuild it?
Somebody has probably already told you to start over. Sometimes that is right. Usually it is the most expensive advice available and the easiest to give.
Continue ReadingYour app is live. Here is what breaks first.
Launch is not the finish line, it is the point at which you find out what you did not test. The failures are predictable, which means they are preventable.
Continue ReadingReplit Agent to production: what has to change first
Replit gives you something the others do not: a server that is already running. That is a real head start, and it hides a different set of decisions.
Continue Reading