Employment Law Counsel

Base44 and Wiz team up to catch 'shadow AI' before it ships. Base44 now scans AI-built apps with Wiz before they ship, targeting shadow AI, apps built inside a company without IT or security ever knowing they exist. BuilderWithin Editorial Team BuilderWithin What happened. Base44 partnered with Wiz, the Google Cloud security platform, to add security scanning directly into its app-building workflow. The stated target is "shadow AI," which Base44 defines as any AI tool, model, or AI-built app that people inside an organization use or create without IT or security's knowledge or approval. It's the AI-era version of shadow IT: tools adopted from the bottom up faster than anyone can track them. Base44 cites a Gartner projection that "by 2030, more than 40% of organizations will experience a security or compliance incident tied to shadow AI." That's a forecast, not a measured outcome, but it's the reasoning behind the partnership. Why it matters. AI app builders exist to let people without a software engineering background ship a working app in hours, complete with a database, logins, and access to real data. That speed is the entire point of a tool like Base44. It also means an app touching real user data can go live before anyone with security responsibility even knows it exists. Base44 frames the tradeoff plainly: an organization can "lock everything down and lose productivity, or let it run and lose visibility." The Wiz integration is an attempt at a third option: keep building fast, but check the app before it ships. Concretely, a builder can run a Wiz scan against an app's code. That scan checks the app against the organization's own existing Wiz security policy and flags things like vulnerable dependencies and risky code patterns. Findings appear inside Base44 so a builder can fix them without switching tools, and the same results also flow to the organization's Wiz dashboard, giving a security team visibility they didn't have before. Base44 also added two account-level controls: restricting which integrations an app is allowed to use, and role-based publishing, meaning an organization can define who is allowed to make an app live and to whom. Who should care. This is built for teams, not solo builders. If you build inside an organization that already has an IT or security function, and that organization uses Wiz, this closes a real gap. Someone can now see what AI-built apps exist and what they're exposed to before those apps reach real users. If you build alone with no security team behind you, the Wiz-specific tooling doesn't apply to you directly. The underlying risk still does. An app you build with a login and a database is only as safe as the access controls you actually set on it, whether or not anyone is scanning it. What builders should do next. If you build inside a Base44 workspace with security or IT oversight, ask whether Wiz is already connected. Base44's post doesn't give pricing or a specific settings path, it only points to its own documentation for connecting Wiz. If you have admin or publishing rights, use Base44's role-based publishing controls to decide who can make an app live and to whom, and restrict integrations to what an app genuinely needs rather than leaving everything open by default. If you're building solo, the practical lesson holds regardless of tooling: an app that quietly does something you didn't intend is still a risk, even with no organization or security team involved. Before you publish anything that touches real user data, check what integrations and login options are actually enabled, not just whether the feature works. End of article BuilderWithin Weekly · Free If you found this useful, subscribe free. Get BuilderWithin Weekly in your inbox. Daily briefings publish on the site, and the weekly roundup pulls together what mattered. Unsubscribe any time. BuilderWithin Weekly · Free · No spam Get BuilderWithin Weekly in your inbox. One weekly roundup in your inbox. Daily briefings publish on the site for people who ship products. Unsubscribe any time · Weekly email, always free

Lovable signs multiyear deal with Google Cloud to up usage 5x, source says. 3 2 minutes read Lovable and Google announced an expanded multiyear collaboration on Wednesday. Lovable, the fast-growing Stockholm vibe-coding startup, has long been a Google Cloud user. Under the new agreement, it will be a much bigger one. While the companies did not disclose the dollar figure, a person with knowledge of the deal tells TechCrunch it involves a fivefold increase in Lovable's footprint on Google Cloud, including AI usage. As part of the deal, this individual tells Real Hacker, Lovable will gain expanded access to both Anthropic's Claude - the AI model widely used for coding tasks - and Google's own Gemini models. The Anthropic piece in particular is interesting. Google invested $10 billion in Anthropic in cash and compute credits in April, promising another $30 billion if Anthropic hits certain performance targets. It made that investment at a $350 billion valuation - just one month before Anthropic raised a staggering $65 billion round that valued the company at nearly $1 trillion. This deal stands to help Anthropic hit those targets, because Lovable is one of Europe's fastest-growing startups on record. According to Lovable, it crossed $400 million in annualized revenue in February, having added $100 million in a single month with just 146 employees. The company claims that more than half of Fortune 500 companies use its product in some fashion. The deal also plugs Lovable into several other parts of Google's ecosystem. Lovable's new agent will be available through Google Cloud's enterprise agent marketplace, the Gemini Enterprise Agent Gallery - an arrangement the two companies first telegraphed at Google's major U.S. cloud conference in April. And to help secure the code that both humans and agents write, Lovable will integrate with Wiz, Google's biggest ever acquisition at $32 billion, which officially closed in March, a year after it was announced. The integration will allow Wiz to identify and remediate security problems in real time. By selling Lovable's agents through Google's marketplace, the cloud giant says enterprise procurement and billing will be simplified, making it easier for Lovable to land more enterprise customers. The calculus for Google is simple enough. If it can keep both Lovable and Anthropic growing by attracting deep-pocketed enterprises, the revenue helps fund the $180 billion to $190 billion in capital expenditures Google plans to spend this year. The company is already in the process of selling a record-breaking $85 billion in equity to cover some of that, so only another $100 billion or so to go. When you purchase through links in its articles, Real Hacker may earn a small commission. This doesn't affect its editorial independence.