The State of Lovable Security: what 295 public Lovable apps are leaking | Shippa

by Willis Johnston

Visit

Oct 17, 2026 Security & Privacy

app security data leakage database protection lovable framework shippable

Gallery

About

I've been building apps with Lovable, Cursor and Claude Code, and kept running into the same worry: the app works, but I had no idea whether the database was quietly readable by anyone. So I built Shippable. You paste your app's link, prove it's yours (your AI tool adds one line for you), and it checks your live app from the outside, read-only, without changing anything. Video above is the 50-second version. On my deliberately leaky test app it found 14 problems, including anyone bei...