What I See When A Vibe-Coded App Lands On My Desk
What ships fast in a demo rarely survives contact with real users, edge cases and the kind of low-effort probing that any moderately curious person will apply to a new app.
- 62% of vibe-coded applications deployed in startups are rewritten or abandoned within three months (Software Reliability Institute, 2026).
- A fintech senior engineer spent two weeks fixing a vibe-coded app that stored passwords in plain text and lacked error handling.
- Vibe coding often skips unit tests, integration tests, and security reviews, trusting AI-generated code without human verification.
- Enterprise buyers are starting to require AI-generated code review clauses in procurement contracts to mitigate risk.
- Open-source tools that detect AI-hallucinated dependencies, such as ‘fake npm packages suggested by LLMs’, are gaining adoption.
A vibe-coded app lands on an executive’s desk and looks polished. It generates spreadsheet exports, logs into a CRM, even sends emails. But the first time a user types a special character into a search field, the app crashes. When the internet connection drops, it shows a frozen spinner. When someone logs in from a phone with a small screen, buttons overlap. These are not bugs — they are predictable failures that rigorous testing would have caught. Yet vibe coding often skips testing entirely.
The term “vibe coding” gained traction in 2025 as large language models and AI code generators like ChatGPT, Claude, and Cursor allowed non-engineers and overworked developers to produce functional prototypes in hours. The promise was democratisation: anyone with an idea could build an app. The reality, as documented by engineers who inherit these projects, is a wave of brittle, unmaintainable code that works in ideal conditions and breaks everywhere else. A 2026 survey from the Software Reliability Institute found that 62% of vibe-coded apps deployed in startups were either rewritten or abandoned within three months.
Key details emerge from conversations with developers who have been asked to rescue these projects. Paul Grimes, a senior engineer at a mid-sized fintech firm, describes receiving a vibe-coded expense tracker that “looked great in the demo but had no error handling, no logging, and stored passwords in plain text.” The app was built by a product manager using an AI assistant in two days. Grimes spent two weeks fixing it before it could pass a security audit. Similar stories appear across forums: vibe-coded apps that fail to handle network timeouts, load duplicate data, or expose internal APIs to the public. The common thread is that AI generates code that looks correct but lacks the defensive programming that comes from experience.
Analysis suggests the problem is not AI — it is the absence of a development discipline that vibe coding encourages. Accelerator programs and venture capitalists who push “move fast and ship” often celebrate quick prototypes without requiring quality gates. A partner at a prominent seed fund told Forbes that “a working demo gets you the next meeting; a robust product gets you the next round.” For many founders, that trade-off is worth it. But the consequences ripple downstream: buggy products erode user trust, increase churn, and create technical debt that can kill a startup before it finds product-market fit. As one CTO noted, “vibe coding is great for throwaway experiments. It is dangerous for anything customers depend on.”
Outlook: expect growing backlash and regulation. Already, some enterprise buyers are adding “AI-generated code review” clauses to procurement contracts. Open-source tools that scan for AI-hallucinated library imports are emerging. The next wave of development might be “vibe checking” — using AI to test AI-generated code under adversarial conditions. For now, the message for executives is clear: if a vibe-coded app lands on your desk, demand a walkthrough with broken inputs. The app that passes that test may actually be ready for real users.
Frequently Asked Questions
Vibe coding is a term for building software quickly using AI code generators like ChatGPT or Cursor, often without formal planning, testing, or code review. It prioritises speed and demo-ability over robustness.
Vibe-coded apps typically lack error handling, edge-case logic, and security safeguards. They are tested only in ideal demo conditions, so they break under real-world scenarios like network drops, unusual inputs, or high traffic.
Developers should add thorough unit and integration tests, implement proper error handling and logging, conduct security audits, and perform adversarial testing with invalid inputs. Code reviews by experienced engineers are essential.
No. Vibe coding is useful for throwaway prototypes, internal tools, or experiments where speed is critical and quality is secondary. It becomes dangerous when used for customer-facing production software without proper safeguards.
Alternatives include traditional software development with full testing cycles, low-code platforms that enforce guardrails, or hybrid approaches where AI generates code that is then rigorously reviewed and hardened by engineers.
Original source
www.forbes.com
Discussion
Join the discussion
Sign in to post a comment or reply.
No comments yet. Be the first to share your thoughts!