Lovable describes its internal offensive security program that uses swarms of AI agents to probe its infrastructure for vulnerabilities.

Agents must capture a flag—a string from an inaccessible system—as deterministic proof of a real vulnerability, not a model's guess.

The program does not replace human security researchers; agents still require human coordination and understanding.