Research

Opviva Research.

What we learn scanning thousands of vibe-coded apps — the patterns, the exposure, and where the industry is heading.

Our flagship analysis of exposure across Lovable, Bolt, v0, Cursor, and Replit — what breaks, how often, and which stacks fare worst.

How agent tools and MCP servers widen the attack surface, the injection classes we see most, and a practical hardening checklist.

The numbers behind the most common critical finding we see across live vibe-coded apps.

Why remediation delivered as a pull request closes issues an order of magnitude faster than a report that lists them.