Audit of 76 live vibe-coded apps: only 3 earned an A

In October 2026, 76 publicly launched apps, mostly built with Lovable, were run through the same free rule-based check. Only 3 apps (4%) got an A, 97% lacked basic security headers, 67% had Google indexing issues and 22% had slow first loads.

• Grades: 3 A, 53 B, 18 C, 2 D and no F across 76 apps
• 97% of apps were missing basic browser security headers
• 67% had indexing issues: 54% lacked canonical tags, 28% had no sitemap
• No exposed databases or private keys in page code were found