Opinion

Softr now tells builders to build with Claude Code and run on Softr, the latest sign that no-code's moat is moving from the editor to the governance layer.

Eight 2026 studies tell one story: ungoverned AI produces more code, more risk, and less value. Governance is the fix.

87% of enterprises use AI but only 7% have cross-agent governance. No-code platforms are the bridge that closes the 80-point gap.

78% of enterprises are cutting AI vendors. The platforms that abstract providers, bill once, and govern survive; the single-vendor ones don't.

Two enterprise low-code CEOs declare no-code dead while Lovable hits $500M ARR. Visual builders aren't dying; they're evolving into governed AI platforms.

As inference costs trend toward zero, the value migrates up to trust, governance, and workflow integration. Here's what's left to sell.

September brings AWS credit expirations, Azure OpenAI term revisions, and EU AI Act grace period ends. A practical checklist for what no-code builders need to audit right now.

Three major governance reports landed within six days in August 2026. Their shared conclusion: AI agents fail in production because environments are ungoverned, not because models are wrong.

Chinese models now power up to 46% of US enterprise token volume on OpenRouter — DeepSeek alone outranks every US lab. The cost savings are real, and so is the data-jurisdiction exposure. Here's the governed-routing fix.

Sysdig's Threat Research Team documented JADEPUFFER — the first fully autonomous AI ransomware attack. An LLM agent handled reconnaissance, credential theft, lateral movement, exploitation, and encryption of 1,342 production configs without any human at the keyboard. The architectural argument: governed platforms are structurally immune to this entire attack class. A step-by-step analysis of where each phase fails against platform-level controls.

China's Implementation Opinions on AI Agents became enforceable on 15 July 2026: a three-tier decision authorisation framework, mandatory filing for high-risk sectors, and human-override rules that apply to any agent touching Chinese users or data — wherever it's hosted. No-code builders serving global clients are in scope whether they know it or not.

A critical authorisation bypass in Base44 let anyone with a guessable app ID walk into a stranger's app — no password, no invite. The flaw is a category problem, not a one-off bug, and it's the clearest case yet for governed no-code.

In six weeks Anthropic shipped Claude for Teachers, Claude Science, and HIPAA self-serve — a vertical AI strategy that turns governed, domain-specific applications into the real product. Here's what it means for no-code builders.

HubSpot made every custom AI assistant read-only on July 13, pushing builders into Breeze Studio — the clearest sign yet that the no-code agent market is consolidating into governed, metered platforms.

DeepSeek V4 just added surge pricing at 2x during Beijing business hours. The first major AI lab to do it, and a warning for every no-code builder wired to raw APIs.

Cisco's $400M Astrix Security acquisition signals that non-human identity governance is the next battleground — and no-code builders deploying AI agents need to pay attention now.

Fable 5's permanent access tiers are here: Max keeps it at 50% limits, Pro gets a $100 credit then $10/$50 per-token billing. What it means for no-code builders.

Only 7% of companies run fully autonomous AI agents, per Bain's survey of 951 enterprises — yet 90% are raising AI budgets. The gap isn't capability; it's governance.

Mistral AI hit $400M ARR just one year after crossing $20M, proving Europe's AI scene is more than a regulatory sideshow. Here's why builders should care about API diversity — and how governed platforms let you exploit it without rebuilding.

Half of enterprises have shipped an AI agent that passed every internal eval, then failed in front of a real customer. The eval gap is structural — and it's why governed platforms, not better tests, are the real fix.

Brex open-sourced CrabTrap, an AI-agent firewall that inspects every outbound request before it leaves your infrastructure. It's a smart answer to a real problem — but the fact a bank-grade engineering team had to build it at all is the real story: agent governance still isn't infrastructure.

Teyrex audited 35 production vibe-coded apps. 100% had no rate limiting. 95% had SQL injection. 85% had unprotected API routes. But the worst finding: none of the builders knew, because the AI tools never warned them.

Enterprise AI budgets are exploding, but the share going to open-source models is shrinking. The paradox reveals that enterprises aren't paying for models — they're paying for governed infrastructure. No-code platforms that provide that governance layer are the natural winners.

Mozilla's State of Open Source AI 2026 report finds open models within 3.3% of closed ones — but only 51% of teams actually ship them. The bottleneck isn't model quality. It's the governance scaffolding that no-code platforms already have.