Lovable Review: A Brilliant First Draft, an Expensive Second One

Lovable is worth it if you need a good-looking, working web app in an afternoon and you’re buying speed, not code you’ll keep; skip it if you already work in an IDE, if you’re maintaining a codebase past the prototype stage, or if you’re shipping real user data without your own security review. Pro costs $25/month for 100 credits (verified Jul 29, 2026), and the catch is that fixing Lovable’s mistakes burns the same credits as making progress.

This Lovable review is consensus-scored and document-verified, not first-hand tested. We verified every price on lovable.dev’s own pricing page on July 29, 2026, pulled Trustpilot’s live score and star distribution the same day, read three r/lovable threads, checked the CVE disclosure at source, and priced three competitors on their own pages.

---

The verdict box

Lovable pricing (verified July 29, 2026)

Lovable prices by workspace, not by seat. Every plan, Free included, allows unlimited collaborators, which is unusual here and quietly generous for a small team. What you’re actually buying is credits.

Students with a verified university email get up to 50% off Pro.

What a credit actually buys

Lovable publishes example costs, which is more transparency than most credit-metered tools offer. On its own numbers (verified Jul 29, 2026): “Make the button gray” costs 0.50 credits, “Remove the footer” 0.90, “Add authentication with sign up and login” 1.20, “Build me a landing page, use images” 1.70. Plan Mode is a flat 1 credit per message.

Do the arithmetic and 100 credits looks like 60 to 200 prompts a month. That is the number the pricing page wants in your head.

It is not the number users report. The complaint dominating r/lovable isn’t the sticker price. It’s that debugging loops eat the same credits as progress does. Here is a four-star Trustpilot review from May 31, 2026, in its entirety: “Very good I wasn’t aware that how quickly 100 Credit Disappear…May be first time user need or offer extra credit..” (Trustpilot) A one-star reviewer on July 26, 2026, less politely: “100 CREDITS FOR £30 LASTED LESS THAN 1 HOUR.”

Two details the pricing page states but doesn’t advertise. Monthly plan credits expire two months after issue (top-ups last twelve; daily grants expire nightly). And Business credits are priced higher than Pro credits, so Business’s 100 are not Pro’s 100 — the plans don’t compare on the number alone.

What Lovable does well

The default output is the best-looking in the category. ✔️ Competitors generate something that works; Lovable generates something you’d show a customer without apologising first. A five-star Trustpilot reviewer on July 26, 2026 called the built-in UI/UX design quality “noticeably superior to other AI development platforms I’ve used.”

It stays inside the change you asked for. ✔️ The same reviewer’s specific praise: other tools needed disclaimers like “only change the background, do not touch anything else”; Lovable’s agent isolates the request. That’s the difference between iterating and firefighting.

Full stack, not just a front end. ✔️ Auth, database, backend logic and one-click deploy come wired up, and you own the code per Lovable’s own terms.

Unlimited collaborators on every plan, including Free. ✔️ No per-seat tax: a five-person team and a solo founder both pay $25, and only the drain rate differs.

It beats every major rival on Trustpilot. ✔️ Lovable holds 4.0 across 1,374 reviews (verified Jul 29, 2026). Same page, same day: Base44 2.9 (818 reviews), replit.com 3.0 (~2,000), Emergent 3.1 (581), Bolt 1.4 (193). The one score above it is Rocket.new at 4.4, on 141 reviews, a tenth of Lovable’s sample, so we wouldn’t lean on it. G2 lists 4.6 from 326 reviews, but we’re relaying that from Google’s result: G2 blocked every direct fetch we tried, and we’d rather say so than pretend.

One caveat on that 4.0, because nobody else seems to print it. Lovable claimed its Trustpilot profile in September 2025, pays for a Trustpilot subscription, and Trustpilot’s own panel labels it a company that “asks customers to review” (all verified Jul 29, 2026). A solicited score and an organic one are not the same measurement. Read the 4.0 as evidence that people who are prompted to rate Lovable mostly like it, which is a real signal, but a narrower one than the number implies.

Where Lovable falls short

The 4.0 hides a split verdict, not a mild one. ❌ The distribution is 64% five-star and 19% one-star (verified Jul 29, 2026); almost no one lands in the middle. That shape, love it or feel robbed, is the honest summary: when the model gets your app right it feels like magic, and when it doesn’t you’re paying by the credit to argue with it.

The security defaults have burned people, and the checkmark is part of the problem. ❌ CVE-2025-48757, published by researcher Matt Palmer on May 29, 2025, is a CVSS 8.26 incorrect-authorization flaw. Generated apps query the database straight from the browser using a public anon key and lean entirely on Row Level Security, and projects went live with policies that didn’t match their business logic: PII, third-party API keys and payment records readable by anyone willing to craft an HTTP request. Lovable shipped a publish-time security scan on April 24, 2025. The disclosure’s own resolution section still reads “Fixed Versions: None”, and says the Publish feature confirms RLS policies are enabled but “doesn’t necessarily indicate if they are sufficient.” (CVE-2025-48757)

Which is the whole problem, and an r/lovable PSA from March 19, 2026 said it in one line: “You can have RLS enabled with a policy that says USING (true) and congratulations, every row is public. Lovable gives you the checkmark anyway.” (r/lovable) That post also reports scanning 29 Lovable apps to an average score of 56/100, with 28% leaking keys. We’re not treating those numbers as fact: they’re one poster’s self-reported scan, no methodology published, no sample list, nothing anyone can reproduce. The USING (true) point needs no scan to stand. It’s how Postgres works.

Quality moves, and not always forward. ❌ A one-star Trustpilot reviewer on July 29, 2026: “they have repeatedly chosen worse and worse ai models… It constantly burns a ton of tokens, telling you it’s fixed or made a change that it just has not made at all.” A five-star reviewer two days earlier described the opposite arc — three months ago “really was not great,” now “a powerful and useful vibecoder.” Both can be true. Neither is a product you can plan a roadmap around.

Error loops are the failure mode that ends projects. ❌ The most-upvoted comment on r/lovable’s main review thread, from April 2025: “Lovable has entered a loop with a persistent error that it doesn’t know how to fix and that makes the entire app unusable.” (r/lovable) A second user in that thread burned through their remaining credits fixing visual errors Lovable itself introduced, then walked away from the project unfinished. The meter runs on the repair, not just the build.

Support is the other recurring one-star theme. ❌ Trustpilot’s own transparency panel shows Lovable replies to 10% of its negative reviews (verified Jul 29, 2026). Users on both Trustpilot and Reddit describe refund requests that went unanswered, including one in the review thread above who says he contacted support twice and got nothing back. (r/lovable)

Who should skip Lovable

Developers. If you can read code, Claude Code or Cursor with your own repo will cost less and frustrate you less. A commenter on the credits thread: “Lovable feels like a toy in comparison. And I’m saving significant money.” (r/lovable) Our AI coding assistants guide covers that route.

Anyone past the prototype. Lovable is excellent at version one and progressively worse value at version four. Export the code before the credit burn exceeds a contractor’s day rate.

Regulated or PII-heavy apps, unless someone reviews the database policies. Not because Lovable is uniquely careless; client-direct-to-database is standard across this whole category. It’s because a green checkmark is not an audit.

Compulsive iterators on a tight budget. If your style is fifty small tweaks, the meter is your enemy. The one piece of advice more than one commenter on the credits thread landed on independently: consolidate the tweaks into fewer, larger prompts, and get specific before you send them. (r/lovable)

Lovable alternatives, by job

No app builder wins every job. Prices verified on each vendor’s own page, July 29, 2026.

Skip-it-if lines, since the table won’t say them:

• Skip Bolt if consumer trust matters — 1.4 on Trustpilot across 193 reviews is the worst score here.
• Skip Replit if you want polish out of the box; it gives you an environment, not a designer. Head-to-head: Replit vs Lovable.
• Skip Base44 if you need a monthly commitment — its headline prices are annual-billing equivalents, and its Trustpilot score is 2.9. See Replit vs Base44.
• Skip all of them if a template would do. A $19 theme with no meter beats $25/month of credits for a brochure site.

More options in Replit alternatives, and the full field in best AI website builders.

Why you can trust this Lovable review

We hold no product in this category and take no placement money. We verified pricing on Lovable’s own page rather than a third-party blog, pulled Trustpilot’s live score and its star distribution the same day, read three r/lovable threads in full, and read CVE-2025-48757 at the researcher’s own disclosure, noting, because it matters, that the researcher works at Replit, a direct competitor, and that the findings hold anyway. What we have not done is build the same app on four platforms and count the credits. That test is queued. Method: how we test AI tools and our independence charter.

FAQ

Is Lovable worth it?

Yes, for prototypes. At $25/month for 100 credits (verified Jul 29, 2026), Lovable is worth it if you’re non-technical and need a deployable, good-looking app fast. It stops being worth it once you’re maintaining that app, because the credits you spend fixing errors quickly exceed what a developer’s tooling costs.

How much does Lovable cost per month?

Free is $0 with 5 build credits a day. Pro is $25/month for 100 credits, Business $50/month, Enterprise a platform fee plus volume pricing (all verified Jul 29, 2026). Yearly billing gives two months free, students get up to 50% off Pro, and plans are per workspace with unlimited users.

Is Lovable safe for a real production app?

With caution. CVE-2025-48757 exposed Lovable-generated apps whose Row Level Security policies didn’t match their business logic. Lovable now scans at publish, but the scan confirms RLS is enabled, not that the policy restricts anything. Have someone read your database policies before you store user data.

Bottom line

Lovable is the fastest route from a sentence to a working, handsome web app, and on that promise it beats the category. What it doesn’t sell is patience. The meter runs while the model fixes its own mistakes, credits expire in two months, and the security checkmark means less than it looks. Build your prototype here. Don’t move in.

Changelog

• 2026-07-29 — QA pass. Every cited source re-fetched independently: lovable.dev/pricing, the Trustpilot profile (score, star distribution, reply rate, all five quoted reviews and their star ratings), all three r/lovable threads, the CVE-2025-48757 disclosure, and the Bolt, Replit and Base44 pricing pages. Corrections made: the truncated Trustpilot credit quote is now printed in full; the “highest trust score in its category” claim was narrowed after Rocket.new (4.4 / 141) turned up on the same page; Lovable’s claimed and paid Trustpilot profile and its solicited reviews are now disclosed; the security PSA poster is no longer described as selling scanning services (he doesn’t — a separate commenter offers free scans); an unsupported “halves their burn” figure was cut; Replit’s 10-parallel-agent feature was corrected to a $100/mo Pro feature, not Core. G2 remains relayed and flagged after a third blocked fetch.
• 2026-07-29 — Page created. Free/Pro/Business/Enterprise pricing, credit-cost examples and credit-expiry rules verified live on lovable.dev/pricing; Trustpilot score (4.0 / 1,374) and star distribution verified live, along with same-page competitor scores for Base44, Replit and Bolt; Bolt, Replit and Base44 pricing verified on their own pages; CVE-2025-48757 read at the researcher’s disclosure; Reddit quotes sourced from three r/lovable threads via old.reddit. G2 score relayed from SERP (direct fetch blocked) and flagged for re-verification.

Independent, no paid placements. See our how we test method and independence charter.