Vibe Coding Liability: Who Pays When AI-Built Apps Fail?
Research shows vibe-coded apps leaking sensitive data at scale, and legal experts warn liability for AI-generated code remains unclear without human review.
Building software by describing it in plain language, often called "vibe coding," has moved from novelty to mainstream practice. Instead of writing every line by hand, people prompt AI models and coding agents to generate, revise, and debug applications. They steer the result through conversation rather than syntax.
The barrier to shipping software is dropping fast. Terminal-based coding agents are competing to become everyday tools for professional developers. Training programs aim to teach non-developers how to turn ideas into working products. Independent makers are using prompt-driven workflows to launch consumer services that challenge established players, and the approach is spreading into institutions far outside the startup world.
That speed comes with trade-offs. Code that is generated quickly is not always reviewed carefully. Security researchers increasingly warn that vulnerabilities in AI-built apps are not isolated mistakes but recurring patterns rooted in how these tools are used. Authentication, data exposure, dependency hygiene, and accountability are becoming central to the conversation.
This hub tracks the tools, people, and risks shaping prompt-driven development:
Whether you write code for a living or are building your first app, this is where to follow how software creation is changing.
Research shows vibe-coded apps leaking sensitive data at scale, and legal experts warn liability for AI-generated code remains unclear without human review.
Studies of thousands of AI-built apps find most carry security flaws, with AI-assisted repos averaging 4.4x more vulnerabilities, as Lovable tops $600M.
Unity unveiled Spark, an AI prompt-driven game maker coming to Google's new Playground, and its Space Corridor demo drew widespread mockery.
Unity unveiled Unity Spark, a prompt-to-game tool that runs only inside Google's new Playground platform, still waitlisted and limited to users 18 and up.
Pervaziv AI launched Cortex CLI, a terminal agent for macOS, Windows and Linux, entering a market led by Claude Code, Codex and Cursor.
SK AX launched AI Bootcamp Vibe, a four-week program teaching non-developers to build AI agents via vibe coding, amid a 373% jump in training inquiries.
Pieter Levels launched hotelist.com to fix Airbnb's compressed 4.5–5.0 ratings and open sourced SuperLevels, a vibe-coded Chrome extension.
Research shows AI-generated code fails security tests ~45% of the time, AI-linked CVEs are rising, and thousands of vibe-coded apps leak sensitive data.
Vibe coding reached the Navy, the dictionary and a $13.3B Lovable valuation in 2026, but studies keep finding serious security flaws in AI-built apps.