Lead story
Top stories
Models & availability
Latest
Lovable has made 19 first-party announcements in the last 8 weeks. Latest: , 30 September 2026.
1 story of Lovable drew coverage in this window, from 7 outlets. A story counts once per outlet, however many pieces they filed.
Lovable's security team discovered a vulnerability in TanStack Start, a framework used by Lovable apps, and reported it to maintainers. Firewall protections were deployed for hosted apps, and affected projects are automatically updated when users make changes. No evidence of exploitation was found.
Lovable is partnering with Microsoft so that apps built with Lovable can be published into a company's own Microsoft tenant via the Copilot Managed Runtime SDK, with sign-in through Microsoft Entra ID and management like any other Microsoft app. The integration also lets Lovable apps read and write Microsoft 365, Fabric, Dataverse, and SQL data without exporting or copying it. Copilot Managed Runtime is rolling out in public preview, while the Microsoft 365 connectors, Fabric, and Microsoft sign-in are available on every Lovable plan today.
Lovable published a technical guide explaining the engineering architecture behind Chats, its feature for connecting conversations to app-building work. The post describes how Lovable's Trajectory System—an append-only, forkable event log modeled after Git—separates what happened from what agents need to know, enabling agents to delegate tasks, maintain context across conversations, and coordinate work through durable inboxes and activations.
Lovable introduced free daily chat functionality across Free, Pro, and Business workspaces, allowing users to explore ideas, evaluate changes, and work with existing projects before committing to paid build or plan work. The feature enables users to connect tools like Notion, Granola, and Linear for context, inspect app code and Lovable Cloud databases, and reuse components across projects.
Lovable now uses Claude Opus 5.5, which completes app-building tasks in a third to half fewer steps than Opus 5 while maintaining equivalent quality. The model gathers context in a single pass, makes fewer and more complete edits, and reduces unnecessary verification loops.
Lovable joined AWS, CrowdStrike, Databricks, Docker, Google Cloud, Okta, Proofpoint, Salesforce, ServiceNow, Wiz, and Zscaler as a founding member of the Blueprint Alliance, a cross-industry coalition developing an open reference architecture for securing and governing AI agents at enterprise scale.
Lovable has acquired Sutro, a platform that built a language, compiler, and backend system to make application behavior and rules explicit for security and reliability. Sutro founder Tomas Halgas and three engineers are joining Lovable to bring technical expertise in making software systems understandable and trustworthy.
Since November 2024, people have created more than 70 million projects with Lovable. Inside companies, many of those projects sit next to Salesforce: a pipeline view a sales team wanted, or a deal desk that matched their approval rules. Until recently, each one meant a ticket to IT or a consultant, because Salesforce was a set of screens you logged into. This year Salesforce opened the platform. Headless 360 exposes every Salesforce capability through APIs and MCP servers, with Salesforce's own identity, permissions, and compliance still in charge. That's why we're working with Salesforce so the apps and agents people build with Lovable run wherever their team already works. How it works Lovable connects to Salesforce in four ways. Headless 360 Headless 360 works in both directions. Apps built with Lovable read and write Accounts, Contacts, Leads, Cases, and Opportunities through it. Each person connects their own Salesforce account, so everyone sees only what your sharing rules allow. And for the views your team opens every day, pick Publish to Salesforce when you connect. …
Lovable is rolling out OJ, a Rust-based preview engine, to replace Vite for its preview sandboxes. OJ reduces cold start times by roughly 4x on a synthetic benchmark and memory usage from gigabytes to hundreds of megabytes, cutting median preview load time from 17.4s to 8.0s in production. The engine is designed to run existing Vite configs and plugins unchanged, and is being deployed gradually across previews.
Kedde, a groundworks business owner near Stockholm, used Lovable to build a logistics platform that replaces the industry's zone-based pricing with real-time, address-based pricing. The platform, which integrates with Volvo Connect fleet data, launched in spring 2026 with one truck and grew to five in three months, achieving the founders' targets of halving customer prices and boosting margins. Lovable enabled the small team to build the system in three weeks for about $500.
Today, we’re formally launching the Lovable Partner Program to help experts and solution providers grow their businesses, while giving companies a trusted way to find partners who can build what they need and transform how their teams operate. The dominant story about AI and work has been one of displacement, with technology taking jobs and leaving people behind. Yet a new category of work is emerging around the people who know how to put AI to use, creating new paths to income, entrepreneurship, and job creation as companies rethink how services are delivered. The demand is growing alongside them. According to McKinsey’s 2026 State of AI report , nearly nine in ten companies now use AI somewhere in their business, but fewer than half have rolled it out across the organization and just over a third say it has improved their bottom line. As companies look for help turning their AI ambitions into software, experts and solution providers that know how to build with Lovable are becoming increasingly valuable. In other words, the Lovable Partner Program formalizes a market that has already taken off. …
Lovable introduced drafts, a feature that lets users create copies of a project with separate chat and preview to explore front-end changes (layout, design, copy) without affecting the live app. Drafts can be shared with collaborators, and changes are only applied when accepted and published. The initial release covers front-end changes only; database structure and login changes still require the main project chat.
Lovable now builds with Fable 5.1, which outperforms Fable 5 by up to 17% on the most difficult tasks, particularly in fixing and improving existing apps without breaking what already works. The update also offers a 31% lower cost per task and a 3.5% lift in visual design quality.
Lovable built a system of app connectors that allow users to integrate their AI-generated apps with external services and data sources. The company developed a Connector Gateway architecture to manage OAuth credentials securely, handle token refresh logic, and enable integrations with nearly 100 services including Gmail, Slack, Firecrawl, ElevenLabs, and Perplexity.
Lovable published a guide explaining how to get an app verified for third-party data access, using the example of Matthew Canaday's SkyRingAI. The article covers Google's OAuth verification process, the shared responsibility model for user data, and how to determine whether an app needs review based on the permissions (scopes) it requests.
Lovable migrated its own website (lovable.dev) from Next.js on Vercel to TanStack Start, hosting it on Lovable's own platform alongside its users' apps. The migration took six months and involved running both frameworks in parallel, routing requests per-user and per-route to minimize hard navigations, and organizing routes into migration groups to maintain user experience.
Lovable's guide explains Model Context Protocol (MCP) and details three ways to use it with Lovable: building from an AI assistant via the Lovable MCP server, adding an MCP server to published Lovable apps so users can interact with them from AI tools, and connecting personal tools like Notion, Linear, Jira, or Granola to bring context into Lovable. It notes that credits apply when the assistant creates or changes something, while read-only actions do not use credits.
Lovable announced a $400 million Series C funding round at a $13.3 billion valuation, led by Menlo Ventures and co-led by the Scaleup Europe Fund. The company reports that since its launch in November 2024, users have created over 60 million projects and Lovable-built apps receive over 900 million visits monthly. Lovable plans to use the investment to expand its platform for building and running businesses.
Lovable describes its approach of model independence, where a control plane assigns different parts of a build to different models based on their strengths and the evolving context of the task, rather than requiring users to pick a model upfront.
Lovable is partnering with Cerebras to reduce response times by 2027, using Cerebras' Wafer-Scale Engine to keep models on a single chip and cut the 'communication tax' of traditional GPUs. The company will move onto dedicated Cerebras capacity in phases, starting with its most latency-sensitive workloads.
Lovable launched trust centers for every app published on its platform. Each app gets a dedicated security page at its own URL that automatically displays active security controls such as HTTPS enforcement, TLS certificate status, and dependency vulnerability checks, without requiring manual input from the developer.
Lovable detailed how its platform secures connected data in production apps, including per-user access, session-bound and offline access modes, and a gateway that pins connectors to a single destination so credentials cannot be misdirected. The post also covers admin-set connector scopes and the risks of copying third-party data into Lovable's own database.
Lovable now lets apps built on its platform connect to end users' own tools, such as Google, Microsoft, Slack, Salesforce, and HubSpot, so each user's data and permissions carry through. Developers set up the connection once per workspace, and Lovable handles sign-in, tokens, and refresh cycles while keeping user credentials out of the app. The company says it does not create a new permissions system, instead reading the permissions users already have in connected platforms.
Lovable describes its internal offensive security program that uses swarms of AI agents to probe its infrastructure for vulnerabilities. Agents must capture a flag—a string from an inaccessible system—as deterministic proof of a real vulnerability, not a model's guess. The program does not replace human security researchers; agents still require human coordination and understanding.