There's a new term making the rounds in tech circles that every VAR should know: vibe coding.
Collins Dictionary named it their Word of the Year for 2025. Y Combinator reported that 25% of its most recent startup batch shipped codebases that were 95% AI-generated. And a platform called Lovable — which lets anyone build a working web app just by describing it in plain English — went from launch to $100M in annual revenue in under eight months.
This isn't a developer trend. It's a business trend. And it's one you should jump on.
Vibe coding is the practice of building software by describing what you want in natural language, and letting AI write the code AND design the interface. You describe your app, iterate by conversation, and ship.
The term was coined by Andrej Karpathy, a co-founder of OpenAI, who described it as "fully giving in to the vibes" — trusting AI so completely that you don't even read the code underneath.
Think of it like this: instead of hiring a developer and explaining a brief, you're having a conversation with AI that is the developer. You say what you want, it builds it, you react, it revises. If someone on your team can write a clear email and run a project in a spreadsheet, they can do this.
This is where it gets interesting for VARs. The tools your customers used to need a developer for — or skipped entirely because of cost — are now buildable in a weekend. Here are examples directly relevant to your business:
Most VARs operate lean. There's not always a developer on staff, limited budget for software, and rarely time to evaluate whether a $400/month SaaS tool is actually worth it. Vibe coding changes that calculus in three concrete ways:
Build what you need instead of paying for it (or going without). Tools that used to cost $10,000–$20,000 via SaaS subscription or months of back-and-forth with a customer developer are now a weekend project. That internal quoting tool, that customer portal, that unified ops dashboard — they're all now within reach.
Unify your data without a big IT project. Most SMBs (including VARs) run on a patchwork of disconnected systems. Getting a single view has typically meant expensive integrations or manual exports. Vibe coding makes it practical to build a lightweight dashboard that pulls from your key sources via API into one place your team actually uses.
Prototype new offerings before you commit to them. Thinking about a new managed service or vertical? Build a working demo and put it in front of a prospect before you've spent anything on building it for real. It's the lowest-cost way to validate whether something is worth pursuing.
Vibe coding is powerful, but it's not without pitfalls. If you deploy it carelessly, the consequences can be serious. Here's what to watch for:
Research from multiple independent studies has found that AI-generated code contains security flaws at significantly higher rates than human-written code. In some analyses, 2-3x more vulnerabilities. A scan of 5,600 vibe-coded apps found over 2,000 vulnerabilities, including 400 exposed API keys and credentials sitting in the open. Lovable specifically had a documented incident in 2025 where 170 customer-built apps had misconfigured databases that exposed personal information.
→ What to do
Never put vibe-coded apps in front of real customer data without a security review. Treat it like any unaudited third-party tool.
Vibe-coded apps are great for prototypes, internal tools, and low-stakes customer-facing tools. They struggle under heavy load, can have inconsistent behavior, and the person who built it often can't explain what the underlying code does.
→ What to do
Be honest about what you're building and for whom. An internal quoting tool? Go for it. A tool handling customer PII or payment data? Get a developer involved in review.
Be honest about what you're building and for whom. An internal quoting tool? Go for it. A tool handling customer PII or payment data? Get a developer involved in review.
The same research that flagged security issues also flagged something else: business teams are deploying vibe-coded apps without IT review, compliance checks, or audit trails. A marketing manager builds a lead tool. A sales rep deploys a customer portal. Nobody in IT knows it exists. IBM's 2025 Cost of a Data Breach report found that "shadow AI" added an average of $670,000 to breach costs.
→ What to do
Establish a simple review process before anything customer-facing goes live. It doesn't need to be bureaucratic — it just needs to exist.
Establish a simple review process before anything customer-facing goes live. It doesn't need to be bureaucratic — it just needs to exist.
AI coding tools sometimes recommend software packages that don't actually exist, or reference outdated libraries with known security holes. Malicious actors have started registering fake package names matching common AI hallucinations, waiting for developers to install them.
→ What to do
If a developer or technically savvy team member isn't reviewing what Lovable generates before you deploy, you're taking on unknown risk.
If a developer or technically savvy team member isn't reviewing what Lovable generates before you deploy, you're taking on unknown risk.
There are several vibe coding tools (Bolt, Replit, v0), but Lovable has emerged as the most accessible and production-capable option for non-technical builders. Here's why it stands out:
Bottom line: if someone on your team can write a clear email, they can build a working web app with Lovable.
You don't need to go deep on day one. Here's a practical on-ramp:
Vibe coding is a practical tool that lets business-minded people ship working software in hours instead of months. For VARs, it represents a real opportunity to build internal tools that actually get used as well as customer-facing web apps to help prospects through their purchasing decisions. Could you also build customer tools that become a source or new revenue? Absolutely.
Lovable is the most accessible entry point. The risks are real, but manageable, and the upside is significant. It's worth noting that you own the code—it exports to GitHub, a developer can pick it up and fix it — you're not locked in or stranded inside of Lovable or any other application.
Is vibe coding a threat to companies that develop small utilities and tools? Yes. Is a vibe coded app likely to displace the well documented, supported, and thoroughly tested POS, asset tracking or label design software your ISV partners provide? No, not likely.
The VARs who experiment now will be the ones writing the playbook a year from now.
BlueStar is committed to keeping our VAR community ahead of the curve on tools, trends, and technology. Download our 12-point pre-launch checklist for vibe coded apps.