There's a new term making the rounds in tech circles that every VAR should know: vibe coding.
Collins Dictionary named it their Word of the Year for 2025. Y Combinator reported that 25% of its most recent startup batch shipped codebases that were 95% AI-generated. And a platform called Lovable — which lets anyone build a working web app just by describing it in plain English — went from launch to $100M in annual revenue in under eight months.
This isn't a developer trend. It's a business trend. And it's one you should jump on.
Vibe coding is the practice of building software by describing what you want in natural language, and letting AI write the code AND design the interface. You describe your app, iterate by conversation, and ship.
The term was coined by Andrej Karpathy, a co-founder of OpenAI, who described it as "fully giving in to the vibes" — trusting AI so completely that you don't even read the code underneath.
Think of it like this: instead of hiring a developer and explaining a brief, you're having a conversation with AI that is the developer. You say what you want, it builds it, you react, it revises.
There are several vibe coding tools (Bolt, Replit, v0), but Lovable has emerged as the most accessible and production-capable option for non-technical builders. Here's why it stands out:
Bottom line: if someone on your team can write a clear email, they can build a working web app with Lovable.
This is where it gets interesting for VARs. The tools your customers used to need a developer for — or skipped entirely because of cost — are now buildable in a weekend. Here are examples directly relevant to your business:
Most VARs operate lean. There's not always a developer on staff, limited budget for software, and rarely time to evaluate whether a $400/month SaaS tool is actually worth it. Vibe coding changes that calculus in three concrete ways:
Build what you need instead of paying for it (or going without). Tools that used to cost $10,000–$20,000 and months of back-and-forth are now a weekend project. That internal quoting tool, that customer portal, that unified ops dashboard — they're all now within reach.
Unify your data without a big IT project. Most SMBs (including VARs) run on a patchwork of disconnected systems. Getting a single view has typically meant expensive integrations or manual exports. Vibe coding makes it practical to build a lightweight dashboard that pulls from your key sources via API into one place your team actually uses.
Prototype new offerings before you commit to them. Thinking about a new managed service or vertical? Build a working demo and put it in front of a prospect before you've spent anything on building it for real. It's the lowest-cost way to validate whether something is worth pursuing.
Vibe coding is powerful, but it's not without pitfalls. Iif you deploy it carelessly, the consequences can be serious. Here's what to watch for:
Research from multiple independent studies has found that AI-generated code contains security flaws at significantly higher rates than human-written code. In some analyses, 2-3x more vulnerabilities. A scan of 5,600 vibe-coded apps found over 2,000 vulnerabilities, including 400 exposed API keys and credentials sitting in the open. Lovable specifically had a documented incident in 2025 where 170 customer-built apps had misconfigured databases that exposed personal information.
Never put vibe-coded apps in front of real customer data without a security review. Treat it like any unaudited third-party tool.
Vibe-coded apps are great for prototypes, internal tools, and low-stakes customer-facing tools. They struggle under heavy load, can have inconsistent behavior, and the person who built it often can't explain what the underlying code does.
Be honest about what you're building and for whom. An internal quoting tool? Go for it. A tool handling customer PII or payment data? Get a developer involved in review.
The same research that flagged security issues also flagged something else: business teams are deploying vibe-coded apps without IT review, compliance checks, or audit trails. A marketing manager builds a lead tool. A sales rep deploys a customer portal. Nobody in IT knows it exists. IBM's 2025 Cost of a Data Breach report found that "shadow AI" added an average of $670,000 to breach costs.
Establish a simple review process before anything customer-facing goes live. It doesn't need to be bureaucratic — it just needs to exist.
AI coding tools sometimes recommend software packages that don't actually exist, or reference outdated libraries with known security holes. Malicious actors have started registering fake package names matching common AI hallucinations, waiting for developers to install them.
If a developer or technically savvy team member isn't reviewing what Lovable generates before you deploy, you're taking on unknown risk.
You don't need to go deep on day one. Here's a practical on-ramp:
Vibe coding is a practical (magical?) tool that lets business-minded people ship working software in hours instead of months. For VARs, it represents a real opportunity for building alignment-driving internal tools as well as customer-facing web apps to help prospects through their purchasing decisions.
Lovable is the most accessible entry point. The risks are real, but manageable, and the upside is significant.
The VARs who experiment now will be the ones writing the playbook a year from now.
BlueStar is committed to keeping our VAR community ahead of the curve on tools, trends, and technology. Download our 12-point pre-launch checklist for vibe coded apps.