#47 - 🤫 Hybrid Vibe Coding with Leo + Xano is my secret weapon
Scaling up vibe coding is the new game!
Hello everyone,
Last week I shared on linkedin which tool I am using to build my new Saas Eqolux with Hybrid vibe-coding, Leo. I receive some messages from people doing exactly the same thing, a backend with no-code and the front-end with tools like Cursor.
Then the cons about using a tool like cursor is ownership, who can help you when something is going wrong? That’s why Leo is also very different, first it is fully integrated with Xano, and second, you have a human support from the agency behind Leo. You can pay for CTO-on-demand to be sure that your app is going in the good direction.
As a CTO or CPO, you don’t need a team before your first 1M ARR - maybe more -, you just need a great CTO-on-demand behind a vibe-coding tool. You can scale, keep your team small to go fast and then hire only to be able to have some disconnected holidays.
What are your thoughts about this?
Benoît de Montecler
Follow me on Linkedin
1️⃣ Lovable Security checklist from 50+ shipped apps by Jacob Klug : 1) Store API keys in Supabase Vault, never frontend - one exposed OpenAI key = $10K overnight 2) Enable Row Level Security or anyone can read/delete your entire database 3) Rate limit all endpoints (100/min per IP, 1000/hour per user) 4) Audit with Chrome DevTools for exposed keys & overfetching 5) Use Vercel/Cloudflare for DDoS protection vs Netlify 6) OAuth (Google/Apple/GitHub) over passwords 7) 3-layer defense: frontend validation, API middleware, database RLS. One breach kills trust forever.
1️⃣ (bis) Lovable is going to be fullstack with Lovable Backend without supabase! Huge shift for Lovable to better own the backend part and don’t be limited by Supabase MCP. If you want to learn more about this, check this video.
2️⃣ Cursor Background Agent runs remotely in secure environment, sending updates directly to Slack with Cursor/GitHub links when work completes. Agents read entire Slack threads before starting to understand full context, including previous discussions and issues you reference. This context awareness lets agents understand references to past conversations and work seamlessly.
3️⃣ FlutterFlow AI lets you build apps with AI assistance. Key features: Sketch to Component (converts UI sketches to components), Prompt to Component/Page (generates UI from text), Magic Cursor (modify elements with prompts), Page Autocomplete, AI Agent Builder (create deployable AI agents), and API integrations with OpenAI, GPT, Dall-E, Stability AI. Create, enhance, and connect AI functionality directly in your FlutterFlow apps using prompts and visual editing tools.
4️⃣ WeWeb AI now builds and updates project library styles automatically. Creates/edits typography, colors, spacing for consistent UI. Features: auto-creates design tokens when missing, reuses tokens in future edits, updates styles on request. No manual style tweaking needed - AI handles consistency across generated UI.
5️⃣ Zapier announces new chatbot ownership transfer feature for Team and Enterprise plan members. This helps manage chatbots as teams grow or roles change within organizations. To transfer ownership: visit Chatbots home page, select the specific chatbot, choose 'Change owner' from menu, follow prompts to select new owner and manage any linked assets. Complete step-by-step tutorial available with full instructions for changing chatbot ownership.
6️⃣ Baserow 1.34 delivers major performance improvements with field indexes providing up to 10x faster filtering on large datasets. New features include field value constraints for better data integrity, multi-row selection for bulk operations, and CSS/JS customization options for Application Builder. Significant enhancements for database speed and functionality.
7️⃣ Webflow acquired GreenSock Animation Platform (GSAP) last fall and made the leading web animation engine 100% free for the entire web community in April. They've been working to enhance Webflow's native interactions solution. Today they're introducing the newest version of Webflow Interactions, powered by GSAP technology.
8️⃣ Softr announces new Databases API + Zapier integration. Connect any platform to Softr Databases via public API and use Zapier for automations across your entire stack.
📆 Next NoCode Events:
AI & Visual Development Conf 2025 on December 9-10th at apidays Paris