v0, Bolt and Lovable all turn a typed request into a working web app, and all three meter AI work in credits or tokens. v0 and Bolt Teams charge per user, while Lovable prices by credits with unlimited members. For a business that will run real work on the result, the bigger differences are what each meter counts, which plan carries single sign-on, roles and audit logs, and who checks the app's security before staff rely on it.
v0, Bolt and Lovable are three of the best-known names in AI app building. Each one lets you type a request like "build me a customer intake form with a dashboard" and get a working web app back in minutes. If you are a founder testing an idea, any of them can be a good afternoon.
A business has a different question. Not "can it build something?" but "can we run real work on what it builds?" That means knowing how the bill grows, who pays for which seats, where the security and admin controls live, and what has happened when things went wrong. This guide compares the three on exactly those points. Every price is as listed on each vendor's pricing page or plan documentation in October 2026, and every incident is attributed and linked.
What each tool is built for
v0
v0 is made by Vercel, a company that hosts websites and web apps. It generates web interfaces and web apps from a prompt. It fits people who already think in terms of web design and front-end code, and teams who want generated work that slots into a developer's workflow.
Bolt
Bolt (bolt.new) lets the AI build and edit a whole web project from your browser while you follow along. It fits people who want to see and touch the project files as the AI works, such as technical founders and developers prototyping quickly.
Lovable
Lovable is aimed at people who want a complete app without touching code. You describe the app, Lovable builds the screens, data and sign-in, and you refine by chatting. It fits founders and non-technical makers who want to stay out of the code entirely.
How each one prices
v0
As listed on v0's pricing page in October 2026:
- Plus: $30 per user per month
- Business: $100 per user per month, with $30 of included monthly credits per user
On May 13, 2025, Vercel moved v0 to token-metered credits. Its announcement put it plainly: "Usage is now metered on input and output tokens which convert to credits, instead of fixed message counts." A token is a small chunk of text the AI reads or writes, so longer conversations and bigger apps use more of them.
Bolt
As listed on Bolt's pricing page in October 2026:
- Pro: $25 a month, starting at 10M tokens a month
- Teams: $30 per member per month, and tokens are not shared between members
Bolt's Trustpilot TrustScore was 1.6 of 5 across 204 reviews as of October 17, 2026. Reviews on Trustpilot are individual opinions and the score moves, but it is a useful prompt to ask Bolt how token use is forecast for a project like yours.
Lovable
As listed in Lovable's plan documentation in October 2026:
- Pro: from $25 a month for 100 credits, or $21 a month billed annually
- Business: from $50 a month for 100 credits, or $42 a month billed annually
Lovable does not charge per seat. Its pricing page says workspaces support unlimited members and plans are priced by the credits they include. The same page says credits pay for building, hosting with Lovable Cloud and AI features inside your apps, all from one balance.
What the meter actually charges for
All three meter AI work, but the unit differs, and so does what draws it down.
- v0 converts tokens into credits. On Business, each user gets $30 of included credits a month.
- Bolt counts tokens directly. On Teams, each member has their own allotment, so one heavy builder cannot borrow from a light one.
- Lovable counts credits from one shared balance that also covers hosting and in-app AI features. A popular app and an active builder pull from the same pool.
What none of the three meters exclude is the AI's own mistakes. When the AI breaks something and then fixes it, both the break and the fix use credits or tokens. That is the root of the most common complaint across the category: a stubborn bug can eat a month's allowance. A business needs to plan for this, either by budgeting headroom or by choosing pricing where failed work is not charged.
Who pays: builders vs people who only use the apps
This is where the three diverge most for a company.
- v0: priced per user, so every person who builds needs a paid seat.
- Bolt: Teams is per member, and allotments are personal.
- Lovable: unlimited members on every plan, priced by credits.
None of the three lists a per-user charge for the people who only use the finished apps. That is good news for rollout, but read it carefully: no per-user charge listed is not the same as free. Hosting, traffic and in-app AI features can still cost money depending on where and how the app runs.
Admin and security features by tier
For a business, four controls matter on day one. Single sign-on (SSO) lets staff log in with their work account and lose access the day they leave. SCIM automatically adds and removes users from your company directory. Role-based access control (RBAC) limits who can see and change what. Audit logs record who did what.
As listed in October 2026:
- v0: SAML SSO and role-based access control are Enterprise only, per v0's pricing page.
- Bolt: SSO, audit logs and data retention policies are Enterprise features, per Bolt's pricing page.
- Lovable: SSO starts at Business; SCIM and audit logs are Enterprise only, per Lovable's plan documentation.
So the price on the plan page is rarely the price a business pays. If you need an audit trail, you are pricing Enterprise on Bolt and Lovable, and asking v0's sales team directly.
Documented incidents
Lovable has the most public security history of the three, partly because it has the most non-technical users publishing apps. Each item below is attributed to its source.
- Missing database access rules (2025). Researcher Matt Palmer found 170 of 1,645 scanned Lovable apps (303 endpoints) exposed through missing Supabase row-level security, the rules that stop one user reading another user's data, in March 2025. It was recorded as CVE-2025-48757 with a severity score of 9.3, published May 2025. Lovable disputes the CVE, saying each customer is responsible for protecting their app's data.
- One app, 18,697 records (February 2026). Researcher Taimur Khan found 16 vulnerabilities, 6 critical, in one Lovable-hosted app, exposing 18,697 user records, The Register reported.
- Public project chats and source (2026). Lovable says a February 2026 regression exposed public projects' chat history and source code from February 3 to April 20, 2026, and that it fixed the issue within two hours of the public report. Lovable also says HackerOne reports from February 22 were closed without escalation. The Register reported Lovable first said "We did not suffer a data breach" before apologizing.
- The wider pattern. An August 2026 scan by reeve.page of 18,554 Lovable apps found 57% of 3,553 checkable Supabase databases had tables readable without logging in.
None of this means v0 or Bolt apps are automatically safe. It means the person publishing the app is responsible for its security on all three, and most business users are not equipped to check.
What happens after launch
Most comparisons stop at the first build. For a business, the first build is the easy part. The real cost of a tool shows up over the following months, and three questions decide whether it stays useful.
Who makes changes? Work changes. A new job type, a new approval step, a new location. On all three tools, changes go back through the same conversation with the AI, and each round draws on the same meter as the original build. If only one person knows how the app was put together, every change waits for them.
What does a change cost? A small wording fix and a new approval rule can cost very different amounts, and it is hard to know which until the AI is done. Ask each vendor how they would price a typical change for you, and whether a change that fails is charged.
Who notices when something breaks? An app your crew relies on needs someone watching it. When a fix in one place breaks another, the person who notices is usually the user in the field, not the builder. Plan for how problems reach the person who can fix them, and how quickly.
A simple test: before you buy, ask yourself who will own each tool in six months, and whether that person could explain how it works to a new hire. If the answer is "the AI knows," keep looking.
Side by side
| v0 | Bolt | Lovable | |
|---|---|---|---|
| Built for | Web interfaces and apps for web-savvy builders | Full projects in a browser workspace | Complete apps for non-coders |
| Entry paid price (Oct 2026) | Plus $30 per user per month | Pro $25 a month | Pro from $25 a month ($21 annually) |
| Business tier | $100 per user per month | Teams $30 per member per month | From $50 a month ($42 annually) |
| Meter | Token-based credits | Tokens | Credits |
| Seats | Per user | Per member, tokens not shared | Unlimited members |
| People who only use apps | No per-user charge listed | No per-user charge listed | No per-user charge listed |
| SSO | SAML SSO on Enterprise | Enterprise | From Business |
| Audit logs | Not listed | Enterprise | Enterprise |
| Who checks security | The builder | The builder | The builder |
A worked example
As an example, picture an operations manager at a 40-person logistics company who wants a proof-of-delivery app for drivers and a returns tracker for the warehouse.
On any of the three tools, the first version arrives quickly. The questions start on day two. The drivers need to see only their own routes. The warehouse lead needs to approve returns, but drivers should not. The owner wants to know who changed a delivery record. Those are roles and audit records. On Bolt and Lovable the audit trail sits on Enterprise, and v0's pricing page does not list one. Meanwhile each round of "drivers can still see other routes, fix it" draws credits or tokens, and the manager cannot be sure the fix closed the gap for good.
The tools did their job. The manager simply needed a platform built for a business, not a sandbox for a maker.
How to choose
- Decide who will build. If it is a developer or a technical founder, all three are workable. If it is managers who have never built software, weigh how much help they will get.
- Price the tier you actually need. Find the plan with SSO, roles and audit logs, and use that price in your comparison.
- Model the meter. Ask each vendor to estimate credits or tokens for one of your real tools, including a few rounds of fixes.
- Ask who pays for the AI's mistakes. If failed attempts are charged, budget headroom.
- Check how seats work. Per user, per member with personal allotments, or one shared pool all change who you need to license.
- Confirm what app users cost. No per-user charge listed is a good sign. Ask about hosting and traffic too.
- Get a security answer in writing. Ask what is checked before an app goes live and who is responsible if records are exposed.
- Ask for onboarding. Find out whether anyone will help your team pick and build its first tools.
Where FORGE fits
FORGE is built for the company in that worked example: a team without developers that needs tools it can run real work on.
Your managers describe the work in plain words. A panel of top AI models plans each tool, a dedicated AI crew builds it, and every piece is checked for quality and security before it is saved, with the tool checked at every step. Most teams have their first real tool the same day, and FORGE builds web, mobile and desktop apps.
The business controls come standard. Every app lives inside your company, people join by invite only, and roles (owner, admin, builder and app user) decide who can see and change what. A complete record of who did what is part of the platform, not an Enterprise upgrade.
Pricing is counted in builds, not tokens. It is $49 a seat a month for each person who builds, with 3 builds included. A change is a small fraction of a build and only counts when something changes. Packs of 10 builds are $150. App users are free, a build FORGE fails is free, owners get alerts at 80 and 100 percent, and nothing ever bills by itself. Our team onboards you ourselves, starting with a workflow workshop.
If you were about to pick between v0, Bolt and Lovable for business tools, talk to us first, or compare pricing and security.
Questions people ask
Which is cheapest: v0, Bolt or Lovable?
At the entry paid tier, Bolt Pro and Lovable Pro both start at $25 a month and v0 Plus is listed at $30 per user per month, as of October 2026. The real cost depends on how much AI work your builds use, because all three meter it in credits or tokens.
Which one charges per seat?
v0 Plus and Business are priced per user, and Bolt Teams is $30 per member per month with tokens that are not shared between members. Lovable does not charge per seat: its pricing page says workspaces support unlimited members and plans are priced by credits.
Do the people who use the finished apps pay?
None of the three lists a per-user charge for people who only use the finished apps. Hosting and app activity can still cost money, so ask each vendor how a busy app is billed.
Which has single sign-on and audit logs?
As listed in October 2026, Lovable offers SSO from its Business plan, with SCIM and audit logs on Enterprise only. Bolt lists SSO, audit logs and data retention policies as Enterprise features. v0 lists SAML SSO and role-based access control as Enterprise only.
Are apps built with these tools secure?
They can be, but the builder is responsible for checking. Researchers have documented exposed records in apps built with AI builders, including Lovable apps with missing database access rules. Review every app that holds customer or employee data before launch.
Can my operations team use v0, Bolt or Lovable without developers?
They can produce a first version, but someone has to judge whether the result is correct and safe, and keep fixing it as the AI iterates. Teams without that skill usually need more guidance than these tools provide.
See what FORGE builds for your team
We onboard every team ourselves, starting with the work that costs you the most time.
Talk to usSources
- v0 pricing
- Vercel: updated v0 pricing (May 2025)
- Bolt.new pricing
- Trustpilot: Bolt.new reviews
- Lovable pricing
- Lovable subscription plans
- Matt Palmer: statement on CVE-2025-48757
- NVD: CVE-2025-48757
- The Register: Lovable-hosted app exposed 18K users
- Lovable: response to the April 2026 incident
- The Register: Lovable denies data leak
- reeve.page: vibe-coded app security 2026
