Vibe coding trend creates software development risks

The rise of ‘vibe coding’—a method where users create software using natural language prompts for generative AI tools—is transforming software development but introducing significant security risks. Coined by researcher Andrej Karpathy, the term describes a workflow where developers rely on intuition and surface-level logic rather than rigorous verification.

Cybersecurity firm ESET has warned that this approach can lead to critical vulnerabilities, such as hardcoded API keys, lack of input validation, and improper access controls. Because these tools often prioritize functionality and visual experience over security, inexperienced users may inadvertently create applications that expose sensitive user data.

Despite these risks, the market for vibe coding is expanding rapidly. Data from Axis Intelligence suggests the market reached an estimated $4.7 billion in 2026, with a compound annual growth rate of 38%. In India, the trend has seen practical applications, such as small business owners using AI to build custom point-of-sale systems to avoid high costs. Experts argue that as AI-generated code becomes more prevalent, the essential skill for engineers is shifting from code generation to systematic, deterministic verification to bridge the ‘trust gap’ created by AI hallucinations.