Bolt
In-browser full-stack app builder by StackBlitz.
Bolt.new runs a full dev environment in the browser, generating and executing code for React, Next.js, Astro, and more. Fast prototyping without local setup.
Bolt alternatives
Other tools in the Prompt to App category.
Lovable
Prompt to full-stack app, Supabase built in.
v0
Vercel AI UI generator for React and Next.js.
Base44
Prompt-to-app builder for internal tools and MVPs.
Rork
AI-first mobile app builder using React Native.
Softgen
AI software architect for end-to-end web apps.
Databutton
AI-first builder for data apps and internal tools.
What to check before shipping
Bolt is good at getting a working demo fast. These are the production checks it typically skips.
Auth Check Only in Client Code
The auth gate runs only in a client component (useEffect redirect or conditional render), which an attacker bypasses by disabling JavaScript or hitting the API route directly.
IDOR Vulnerability on REST Endpoint
A REST endpoint returns resources by id without verifying the caller owns that resource. Any authenticated user can access any other user's data by changing the id in the URL.
Missing Row Level Security on Supabase Table
A public Supabase table has RLS disabled or has an overly permissive policy, meaning any authenticated user can read or modify every row regardless of ownership.
Secret API Key Exposed in Client Bundle
A sensitive credential (Stripe secret, OpenAI API key, Supabase service role key) is prefixed with NEXT_PUBLIC_, causing it to be inlined into the browser JavaScript bundle where anyone can read it.
For a deeper dive on production readiness specific to Bolt, see the Bolt vibe coding guide.
Bolt on the blog
Bolt.new Apps: 7 Production Issues and How to Fix Them
Bolt.new gets you from idea to working app in minutes. But the generated code has consistent patterns that break in production. Here are 7 specific issues with code-level fixes.
toolsCursor vs Lovable vs Bolt: What Each Tool Gets Right (and What They All Skip)
Cursor hit $1B ARR. Lovable reached a $6.6B valuation. Bolt crossed 5M users. But all three leave critical gaps. Here's an honest comparison and what to do about it.
Audit your Bolt app
Connect your repo and get a Finish Plan tailored to Bolt output.
Start scan