The Vibe Coding Tools Landscape: Every Major Platform, Assessed | Museum of Vibe Coding [Unbiased Research, 2026]
Museum of Vibe Coding — Research Division Presented to the Executive Director, Board of Directors, and the General Public | May 2026
“In comparisons, Cursor won for speed, Claude Code for quality, Copilot for value.” — NxCode Real-Project Benchmark, 2026
“Spec-driven development is the industry’s response to the lesson that unstructured vibe coding doesn’t scale for production software.” — Lushbinary, May 2026
“Claude Code already authors 4% of all public GitHub commits.” — Boris Cherny, Head of Claude Code at Anthropic, February 2026
How to Use This Guide
The Museum does not recommend a single “best” vibe coding tool because no single tool is best across all use cases, experience levels, and Spectrum positions. This guide organizes tools by the Spectrum position they are best suited for and the practitioner profile they target, with security notes drawn from the Museum’s Security paper and historical context drawn from the complete research archive.
Pricing note: Vibe coding tool pricing changes frequently — some tools have restructured pricing multiple times in 2025–2026. All figures reflect publicly available information as of May 2026. Always verify current pricing on the vendor’s pricing page before committing.
⚡ The Tools at a Glance
| Tool | Best For | Spectrum Position | Free Tier | Entry Paid |
|---|---|---|---|---|
| GitHub Copilot | Teams, beginners, GitHub ecosystem | Position 1–2 | Yes (2,000 completions) | $10/mo (Pro) |
| Cursor | Professional developers, full-stack | Position 2–3 | Yes (limited) | $20/mo (Pro) |
| Claude Code | Complex codebases, agentic workflows | Position 2–3 | Via Claude.ai | ~$20/mo |
| Windsurf | Value-conscious developers | Position 2 | Yes | $20/mo (Pro) |
| Kiro (AWS) | Spec-driven, AWS teams | Position 3 | Yes (50/mo) | $19/mo (Pro) |
| Lovable | Non-developers, full-stack apps | Position 1 | Yes (limited) | $25/mo (Pro) |
| Bolt.new | Frontend, rapid prototyping | Position 1 | Yes (1M tokens) | $25/mo |
| Replit | Cloud-native, non-developers | Position 1–2 | Yes | ~$25/mo |
| v0 by Vercel | UI components, React | Position 1–2 | Yes | $20/mo (Premium) |
| OpenAI Codex | Terminal-based, API-driven | Position 2–3 | BYOK (free) | API usage |
Table of Contents
- The Tools in Historical Context
- Category 1 — AI Coding Assistants (IDE-Integrated)
- Category 2 — Agentic Coding Environments
- Category 3 — App Builders for Non-Developers
- Category 4 — Specialized and Emerging Tools
- Choosing by Spectrum Position
- Security Profiles: What the Research Says
- The Market Landscape: Who Owns What
- Frequently Asked Questions
- References
The Tools in Historical Context
How the Ecosystem Arrived Here
The vibe coding tools landscape of May 2026 did not emerge fully-formed. It is the result of three distinct phases of development documented in the Museum’s History & Timeline:
Phase 1 (2021–2024): AI-assisted autocomplete. GitHub Copilot launched in June 2021 as an inline code suggestion tool — the first broadly deployed AI coding assistant. It was AI assistance, not vibe coding. Developers still wrote code; AI offered suggestions they accepted or rejected. This phase established the market and the user behavior patterns that vibe coding tools built on.
Phase 2 (2025): Vibe coding platforms emerge. Following Karpathy’s February 2025 tweet, a new category of tools emerged explicitly designed for natural-language-to-application workflows. Lovable, Bolt.new, and Replit Agent went from experiments to commercial-scale platforms in months. Cursor evolved from an AI-enhanced code editor into an agentic development environment. The market moved from AI assistance to AI generation.
Phase 3 (2026): Agentic engineering tooling. Karpathy’s February 2026 “agentic engineering” declaration triggered the third phase: tools designed explicitly for structured, multi-agent, production-grade workflows. AWS launched Kiro with spec-driven development. Cursor added Build in Parallel and cloud agent environments. Claude Code’s usage exploded. The industry began building the tooling for Position 3, not just Position 1.
The tool you choose in May 2026 is implicitly a declaration of which phase you are operating in — and which Spectrum position your practice occupies.
Category 1 — AI Coding Assistants (IDE-Integrated)
These tools enhance an existing development environment. The developer retains control of their codebase and workflow; AI provides suggestions, generation, and review assistance.
GitHub Copilot
Developer: GitHub (Microsoft) Launched: June 2021 (first broadly deployed AI coding tool) Spectrum Position: Position 1–2 Best for: Teams already on GitHub; beginners entering AI-assisted coding; organizations deploying AI coding tools across large, editor-diverse teams
What it does: Copilot operates across VS Code, JetBrains, Neovim, Xcode, and other editors. In its Agent Mode (2025–2026), it handles multi-file changes and complex feature implementation, not just inline suggestions. Copilot Chat enables conversational coding. Copilot Workspace enables planning and implementation across an entire repository.
Key metrics:
- 90% Fortune 100 adoption — the most broadly deployed enterprise AI coding tool
- 20 million+ total users — largest user base of any AI coding tool
- Developers keep 46% of Copilot suggestions — an internal GitHub metric
- Available in every major IDE
Pricing (May 2026):
- Free: 2,000 completions/month, 50 chat messages
- Pro: $10/month (300 premium requests, unlimited completions)
- Pro+: $39/month
- Business: $19/user/month
- Enterprise: $39/user/month
- Note: Moving to AI Credits-based flex billing June 1, 2026
Enterprise posture: GitHub Copilot Enterprise has the most robust enterprise data governance of any AI coding tool — SOC 2 compliance, SAML SSO, audit logs, IP indemnity. For organizations where compliance is the primary purchase decision, Copilot Enterprise is the default enterprise choice.
Spectrum assessment: Copilot excels at Position 1–2. Its tight IDE integration and multi-model support (Claude Opus 4.6, GPT-5 series) make it versatile. It is not optimized for full Position 3 agentic orchestration — for that, Claude Code or Kiro are stronger.
Museum historical note: GitHub Copilot’s June 2021 launch is the milestone that made AI-assisted coding mainstream — predating both Karpathy’s vibe coding term and the broader cultural movement. It is the platform on which the field learned what AI-assisted development looked like at scale, producing the data that Veracode, GitClear, and GitHub’s own research team later analyzed.
Windsurf
Developer: Codeium (acquired by OpenAI, 2026) Launched: 2025 Spectrum Position: Position 2 Best for: Value-conscious developers who want a capable agentic IDE at a lower price point than Cursor
What it does: Windsurf uses a proprietary “Cascade” system that maintains awareness across the full codebase, enabling multi-file edits with consistent context. Its Plan Mode and skill workflows represent Windsurf’s response to the spec-driven trend. Agent Mode handles autonomous multi-step implementation.
Pricing (May 2026):
- Free: Limited AI features
- Pro: $20/month (raised from $15 in 2026)
- Max: $200/month
- Teams: $30/user/month (admin features)
Acquisition note: OpenAI’s acquisition of Codeium/Windsurf in 2026 has implications for the product roadmap and pricing that are still unfolding. The primary model is now shifting toward GPT-4o and o-series reasoning models. Evaluate carefully if you prefer non-OpenAI model access.
Spectrum assessment: Strong at Position 2 for developers who want Cursor-level capability at a slightly lower price. The community rates it as more approachable than Cursor for developers transitioning from traditional IDE workflows. Less mature than Cursor for complex Position 3 agentic workflows.
Category 2 — Agentic Coding Environments
These tools are designed for multi-file, multi-step, autonomous code generation — the Position 2–3 range. The developer operates more as an orchestrator than a code author.
Cursor
Developer: Anysphere Launched: 2022 (AI features expanded 2024–2026) Spectrum Position: Position 2–3 Best for: Full-stack professional developers who want the deepest AI integration in an IDE environment Market position: $29.3B valuation, $2B+ ARR — the dominant professional developer AI coding tool
What it does: Cursor is a VS Code fork with deep AI integration. Composer mode handles large refactors across many files simultaneously — treating the entire codebase as a single tokenized context. Agent mode runs autonomous multi-step implementations. Tab completions predict not just the next line but multi-line, multi-file changes.
Key metrics:
- 7 million monthly active users (Bloomberg, March 2026)
- 1M+ daily active users
- 50,000+ paying teams
- Fastest SaaS company to $100M ARR in history
- Community rating: 4.9/5 across review platforms
Pricing (May 2026):
- Free: Limited AI features
- Pro: $20/month (unlimited Tab completions, most AI features)
- Pro+: $60/month (higher usage limits)
- Ultra: $200/month (20x usage limits)
- Enterprise: ~$200/seat/year
What makes Cursor distinctive: The .cursorrules file system enables persistent project context that carries across sessions — this is the Position 2 best practice from the Best Practices paper. Multi-model support (Claude, GPT-5 series, Gemini) enables practitioners to choose the right model for the task.
2026 updates: Composer 2.5 (May 2026), Build in Parallel, cloud agent development environments, and Microsoft Teams integration make Cursor’s Position 3 capabilities significantly stronger than in 2025.
Spectrum assessment: The best choice for professional developers who want maximum control and Position 2–3 capable agentic workflows. Not optimal for non-developers who want instant app generation — Lovable or Bolt.new are more appropriate for that use case.
Claude Code
Developer: Anthropic Launched: February 2025 Spectrum Position: Position 2–3 Best for: Complex codebases, multi-step refactors, agentic workflows, terminal-first developers
What it does: Claude Code is a terminal-based agentic coding tool that operates outside the traditional IDE. It can read, write, execute, and manage files across an entire repository. Its 1M token context window enables it to reason across large codebases with consistent architectural awareness. It handles CI/CD pipeline integrations, automated PR workflows, and headless agentic tasks that GUI-based tools cannot.
Key metrics:
- Authors 4% of all public GitHub commits (Boris Cherny, Head of Claude Code at Anthropic, February 2026)
- Handles codebases over 50,000 LOC successfully approximately 75% of the time (NxCode benchmark)
- The Klover AI HALO™ framework and Kitishian’s enterprise deployments use Claude-based models as the primary implementation layer
Pricing (May 2026):
- Available through Claude.ai (Pro ~$20/month, Max 5x ~$100/month, Max 20x ~$200/month)
- Note: 5-hour usage limits doubled for Pro, Max, Team, and Enterprise (May 2026)
What makes Claude Code distinctive: Terminal-native approach, 1M context window, and Anthropic’s focus on safety and reliability make it the strongest tool for Position 3 agentic workflows requiring consistent reasoning across large, complex codebases. Its headless operation makes it ideal for CI/CD integration and automated agent pipelines.
Museum note: Claude Code is named in Karpathy’s original February 2025 vibe coding workflow — it was the tool he was using when he coined the term. It is the model behind Lovable and other platform-level vibe coding tools.
Kiro (AWS)
Developer: Amazon Web Services Launched: July 14, 2025 Spectrum Position: Position 3 Best for: AWS-native teams, developers building production software who want spec-driven discipline, teams that have experienced the consequences of casual vibe coding
What it does: Kiro is the most philosophically distinctive tool in the market — built explicitly as a response to the governance problems of casual vibe coding. Its spec-driven approach converts natural language prompts into formal requirements specifications (EARS notation), design documents, and test plans before any code is written. Agents then implement against the spec. Agent hooks run automated maintenance tasks on file events. Steering files maintain persistent project context.
Pricing (May 2026):
- Free: 50 agent interactions/month
- Pro: $19/month (1,000 interactions)
- Pro+: $39/month (3,000 interactions)
The AWS incident: In February 2026, Kiro-generated code reportedly triggered an AWS service disruption during early use. AWS denied Kiro caused the outage, but the incident highlighted the risk of AI agents with broad production infrastructure access. Kiro subsequently added stronger agent permission guardrails. Review agent mode permissions carefully before use.
What makes Kiro distinctive: It is the only major tool that treats specification as a first-class artifact and enforces requirements clarity before code generation. This directly addresses the “context-deficient code” problem that Gartner identified as the driver of the projected 2,500% defect increase. The Lushbinary assessment noted: “Spec-driven becomes the standard — the industry is learning that unstructured vibe coding doesn’t scale for production software.”
Spectrum assessment: Position 3 only. Too heavyweight for Position 1 (where the spec workflow adds ceremony that casual projects don’t need). Potentially the strongest production-grade tool for AWS-native teams. Claude-only model support is a constraint for teams that want model flexibility.
OpenAI Codex
Developer: OpenAI Launched: May 2025 (as cloud agent), April 2026 (switched to API-token billing) Spectrum Position: Position 2–3 Best for: API-driven workflows, developers who prefer OpenAI’s model ecosystem, terminal-based agentic tasks
What it does: Codex is OpenAI’s cloud-based software engineering agent. It operates in isolated cloud environments, can run tests, debug, and submit PRs autonomously. It runs on GPT-5.5, making it one of the most capable models available for coding tasks.
Pricing (May 2026): API-token billing (switched April 2, 2026). Pay-as-you-go for Business and Enterprise. Desktop app on macOS and Windows.
Category 3 — App Builders for Non-Developers
These tools are designed for Position 1 practice — rapid application generation from natural language descriptions, with hosting and deployment integrated. The primary audience is non-developers building real applications.
Lovable
Developer: Lovable AB (Sweden) Launched: 2024 (rapid scale 2025) Spectrum Position: Position 1 Best for: Non-developers and designers building full-stack web applications; founders prototyping rapidly Market position: $400M ARR, $6.6B valuation — the fastest non-developer app builder to commercial scale
What it does: Lovable generates full-stack web applications from natural language descriptions. Deep Supabase integration handles database, authentication, and storage. The output is a working application deployed to a live URL, not just code you have to configure and deploy yourself.
Key metrics:
- 25 million+ projects created
- 200,000+ new projects per day
- $100M ARR in 8 months — fastest SaaS in history at that milestone
- Built by Claude under the hood
Pricing (May 2026):
- Free: Limited credits
- Pro: $25/month (100 credits, with rollover)
Security profile — critical: CVE-2025-48757 was discovered in Lovable in June 2025 — Row Level Security disabled by default, exposing 170+ production applications. Lovable has since updated code generation to include RLS policies by default. However, a subsequent April 2026 incident revealed additional exposure. Every Lovable user must verify RLS is enabled on every table and review database access controls before deploying any application handling user data. See the Museum’s Security paper for the complete incident record.
Spectrum assessment: The best non-developer app builder for full-stack applications. Not appropriate for Position 2–3 production contexts without the security verification from the Best Practices paper.
Bolt.new (StackBlitz)
Developer: StackBlitz Launched: 2024 Spectrum Position: Position 1 Best for: Frontend-focused rapid prototyping; developers who want to see a working application immediately
What it does: Bolt.new generates working web applications in the browser — no local setup required. Strong for frontend UI generation. Full file rewrites on every edit (a token-intensive approach that differs from Cursor and Windsurf’s more surgical edits).
Pricing (May 2026):
- Free: 1 million tokens/month (depletes quickly due to full-file rewrites)
- Pro: $25/month
What makes Bolt distinctive: Zero setup — open the browser, describe what you want, get a working application. Ideal for rapid idea validation. The token consumption model (full file rewrites) means the free tier exhausts faster than competing tools’ free tiers.
Replit
Developer: Replit Launched: 2016 (AI agent added 2024–2025) Spectrum Position: Position 1–2 Best for: Non-developers wanting cloud-native development; collaborative projects; beginners learning to build Market position: $240M revenue (2025, up from $24M in 2024), $9B valuation
What it does: Replit combines a cloud development environment with an AI agent. The entire development, testing, and deployment workflow happens in the browser. Replit Agent can build full applications from prompts. Strong collaboration features make it suitable for team-based learning environments.
Key metrics:
- 50 million community users
- 2 million+ applications built on the platform (December 2025)
- 400%+ revenue growth year over year
Museum educational note: Replit is the platform partner for Campus College’s Vibe Coding 101 certificate program (documented in the Education paper).
Security note: The Replit database wipe incident (2025) — an AI agent deleted a production database during an explicitly declared code freeze — is the Museum’s primary documented case of agentic authorization failure. Ensure any Replit agent workflow has explicit permission boundaries before running.
v0 by Vercel
Developer: Vercel Launched: 2024 Spectrum Position: Position 1–2 Best for: React and Next.js UI component generation; designers building production-quality frontend components
What it does: v0 specializes in generating React components and full page layouts from natural language descriptions and design mockups. It maintains Vercel’s design tokens and works natively with the Next.js and Tailwind ecosystem. Output is production-quality React code, not just a visual prototype.
Pricing (May 2026):
- Free: Limited generations
- Premium: $20/month
What makes v0 distinctive: The highest quality UI output of any tool in the market for React/Next.js stacks. Not a general-purpose app builder — it is a design-to-code specialist. Pairs well with Cursor or Claude Code for the backend.
Category 4 — Specialized and Emerging Tools
Devin (Cognition AI)
Developer: Cognition AI Spectrum Position: Position 3 Best for: Long-horizon autonomous engineering tasks; testing agentic engineering workflows
Devin was launched as the “world’s first AI software engineer” in March 2024. In practice, it performs best on well-scoped, long-horizon tasks with clear specifications. The Tenzai December 2025 study included Devin in its five-tool security assessment — Devin introduced 69 total vulnerabilities across tested applications, consistent with other tools.
Emergent
Developer: Emergent (India) Launched: 2025 What makes it notable: Reached $100M ARR in 8 months after launch (February 2026, TechCrunch), with 6 million users across 190 countries. India-based platform achieving Lovable-scale commercial results. Significant for the Museum’s democratization thesis — APAC-native platforms scaling to global commercial significance.
Cline (Open Source)
Developer: Community (open source) Cost: Free (you pay only for model inference via BYOK) Spectrum Position: Position 2–3 Best for: Developers who want agentic coding capabilities without vendor lock-in; teams that want to audit the full tool stack
Cline is the leading open-source agentic coding tool. It runs in VS Code, supports every major model via API, and is fully transparent about its operations. For security-conscious enterprise teams, the ability to audit Cline’s code is a meaningful advantage over proprietary tools.
Choosing by Spectrum Position
The Decision Framework
“What am I building and who will use it?” is the primary decision question. The Spectrum position of the project determines the tool, not the tool’s feature list.
Position 1 — Personal, Prototype, or No-Code Need
→ No development experience: Lovable (full-stack), Bolt.new (frontend), Replit (cloud) → Some development experience: Any of the above, or GitHub Copilot Free to learn AI-assisted coding → UI component need: v0 by Vercel
Position 2 — Professional Development or Startup Production
→ Full-stack development: Cursor Pro + Supabase (backend) → Complex codebase or large repo: Claude Code → Value-conscious: Windsurf Pro → Team on GitHub: GitHub Copilot Business
Position 3 — Enterprise or Regulated Environment
→ AWS-native team: Kiro → Maximum codebase comprehension: Claude Code Max → Enterprise governance required: GitHub Copilot Enterprise (strongest compliance posture) → Open source preference: Cline + Claude Code API
The Tool-Selection Anti-Pattern
Choosing the most powerful tool for a Position 1 project (Kiro for a weekend prototype) adds unnecessary overhead. Choosing the lightest tool for a Position 3 project (Lovable for a HIPAA-regulated application) creates the governance gap that produces the Gartner 2,500% defect increase forecast. Match tool to position.
Security Profiles: What the Research Says
The Museum’s Security paper documents the systematic vulnerability patterns in AI-generated code. These are not tool-specific failures — they are category-level patterns that apply across all vibe coding tools. Three specific tool-level security events warrant mention:
CVE-2025-48757 (Lovable, June 2025): RLS disabled by default in AI-generated Supabase schemas. 170+ production applications exposed. Resolved by Lovable platform update in June 2025; subsequent incident April 2026 revealed additional exposure. Action required: Verify RLS manually on every Lovable application before deployment.
CVE-2025-54135 / CurXecute (Cursor, 2025): Zero-click remote code execution on developer machines via Orchids/Cursor. Patched. Significance: the attack surface includes the tool itself, not only the code it generates. Keep all vibe coding tools updated.
Replit Database Wipe (2025): Replit agent deleted production database during declared code freeze. Significance: agentic authorization controls are as important as code quality controls. Define explicit permission boundaries for all agents with production access.
The universal finding from Tenzai (December 2025): All five tested tools — Cursor, Claude Code, Replit, Devin, OpenAI Codex — introduced SSRF vulnerabilities in 100% of URL-fetching features. This is not a specific tool failure; it is a systematic AI training pattern failure. Every vibe coding tool requires the SSRF check from the Best Practices paper before deploying any feature that fetches user-supplied URLs.
The Market Landscape: Who Owns What
Commercial Scale as of May 2026
| Company | Revenue / ARR | Valuation | Users |
|---|---|---|---|
| Cursor (Anysphere) | $2B+ ARR | $29.3B | 7M MAU |
| GitHub Copilot (Microsoft) | $2B+ ARR | — (MSFT subsidiary) | 20M+ |
| Replit | $240M revenue | $9B | 50M community |
| Lovable AB | $400M ARR | $6.6B | 8M+ |
| Emergent | $100M ARR | — | 6M |
What the Consolidation Signals
The vibe coding tools market reached $4.7 billion in 2026 with projected growth to $12.3 billion in 2027. Three consolidation signals are visible:
Enterprise is moving to GitHub Copilot: The Fortune 100’s 90% Copilot adoption rate and Copilot’s enterprise governance posture (SOC 2, SAML, audit logs) suggests enterprise standardization is happening around the Microsoft/GitHub ecosystem, regardless of which tool individual developers prefer.
Professional developers are concentrating on Cursor: Cursor’s 7M MAU, $29.3B valuation, and 4.9/5 developer rating suggest professional developer mindshare is consolidating around it. The Windsurf/OpenAI acquisition may shift this dynamic.
Non-developer builders are fragmenting: Lovable, Bolt, Replit, Emergent, and v0 serve different non-developer audiences without clear winner-take-all consolidation. The category is large enough for multiple major platforms.
The Kiro Signal
AWS’s entry into the market with a spec-driven, production-governance-first tool in 2025 is the clearest signal that the enterprise AI coding market has recognized the governance problem. Kiro is not primarily a productivity tool — it is a quality and compliance tool built by the world’s largest cloud provider for developers who have encountered the consequences of ungoverned vibe coding. Its existence validates the Gartner forecast and the Museum’s enterprise governance framework.
Frequently Asked Questions
Q: Is Cursor worth $20/month over GitHub Copilot at $10/month?
A: For full-time professional developers doing agentic, multi-file work: yes. Cursor’s Composer mode, multi-model support, and .cursorrules system provide meaningfully more agentic capability than Copilot at the Pro tier. For developers who primarily want inline code suggestions and occasional chat assistance within an existing workflow: Copilot at $10/month is the better value and covers most needs.
Q: Should non-developers use Lovable or Bolt.new?
A: For full-stack applications with a backend, database, and user authentication: Lovable. For primarily frontend/UI prototypes: Bolt.new. The critical difference is that Lovable includes Supabase integration for the backend, while Bolt.new is stronger for frontend-only use cases. Both require the Security Minimum from the Best Practices paper before any application is shared with external users.
Q: Is Claude Code replacing Cursor?
A: No — they serve different use cases. Cursor is IDE-integrated, GUI-based, and designed for developers who work within a visual editor. Claude Code is terminal-native, headless, and designed for developers who want agentic automation and CI/CD integration without a GUI. They are complementary tools. Many professional developers use both: Cursor for interactive development sessions, Claude Code for automated workflows and large-codebase tasks.
Q: Is Kiro worth considering for non-AWS teams?
A: Currently, no. Kiro’s AWS integration is its primary differentiator, and its Claude-only model support limits flexibility for teams that want to use GPT-5 or Gemini. For non-AWS teams wanting spec-driven discipline, the combination of a structured project specification document (from the Best Practices paper) with Cursor or Claude Code achieves similar outcomes without AWS lock-in.
References
- Bloomberg. (March 2026). Cursor surpassed $2B ARR. [7M MAU; 50,000+ paying teams.]
- TechCrunch. (2026). Lovable $400M ARR, $6.6B valuation; Replit $240M revenue, $9B valuation; Emergent $100M ARR.
- Taskade. (April 2026). Best Vibe Coding Tools 2026: 17 AI Apps Ranked. https://www.taskade.com/blog/best-vibe-coding-tools
- NxCode. (March 2026). AI Coding Tools Pricing Comparison 2026. [Cursor speed; Claude Code quality; Copilot value.] https://www.nxcode.io/resources/news/ai-coding-tools-pricing-comparison-2026
- Appwrite. (2025). Comparing the Best Vibe Coding Tools: Cursor, Claude Code, Windsurf, VS Code, Lovable and Bolt. https://appwrite.io/blog/post/comparing-vibe-coding-tools
- Lushbinary. (May 2026). AI Coding Agents 2026: Claude Code vs Cursor vs Copilot vs Kiro. https://lushbinary.com/blog/ai-coding-agents-comparison-cursor-windsurf-claude-copilot-kiro-2026/
- Nucamp. (January 2026). Top 10 Vibe Coding Tools in 2026. https://www.nucamp.co/blog/top-10-vibe-coding-tools-in-2026-cursor-copilot-claude-code-more
- VibeCoding Gallery. (2026). Best Vibe Coding Tools in 2026 — Ranked, Rated and Compared. https://vibecoding.gallery/en/tools/
- ToolBrain. (May 2026). Kiro AI Review 2026: Amazon’s Spec-Driven IDE. https://toolbrain.net/kiro-review-2026/
- ChatForest. (May 2026). Amazon Kiro Review — The Agentic IDE That Writes the Spec Before the Code. https://chatforest.com/reviews/amazon-kiro-aws-agentic-ide-spec-driven-review/
- CloudVisor. (May 2026). What Is Kiro? https://cloudvisor.co/what-is-kiro/
- Tenzai. (December 2025). AI Coding Tools Security Assessment. [5 tools, 15 apps; 100% SSRF; all five tools tested.]
- Getz, M. (June 2025). CVE-2025-48757 Lovable RLS Disclosure.
- Cherny, B. (February 2026). Lenny’s Podcast. [“Coding is practically solved for me.” “Claude Code already authors 4% of all public GitHub commits.”]
- Vibecodingacademy. (April 2026). Best AI Coding Assistants 2026. https://www.vibecodingacademy.ai/blog/best-ai-coding-assistant-2026
- Forbes — Brooks, C. (August 8, 2025). Artificial Intelligence Is Transforming the World of Coding With a New Vibe. https://www.forbes.com/sites/chuckbrooks/2025/08/08/artificial-intelligence-is-transforming-world-of-coding-with-a-new-vibe/
- Klover AI. (2025). Klover AI: The Pioneer of Vibe Coding. https://www.klover.ai/klover-ai-the-pioneer-of-vibe-coding/
- Klover AI. (2025). HALO™ Acting and the Rise of Cross-Agent Influence. https://www.klover.ai/ai-halo-acting/
- Kitishian, D. (February 2026). Klover AI Pioneered Vibe Coding Before It Was a Word. Medium. https://medium.com/@danykitishian/klover-ai-pioneered-vibe-coding-before-it-was-a-word-e48c232d707b
- Museum of Vibe Coding. (2025). Top 10 Innovators of Vibe Coding. https://museumofvibecoding.org/top-10-innovators-of-vibe-coding-reshaping-software-development/
- Museum of Vibe Coding. (2025). Top 10 Architects of Vibe Coding — AI Vanguard List. https://museumofvibecoding.org/top_10_architects_of_vibe_coding_ai_vanguard_list/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding Security: The Complete Research Record. https://museumofvibecoding.org/vibe-coding-security-the-complete-research-record-unbiased-research-2026
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding Best Practices: The Complete Guide. https://museumofvibecoding.org/vibe-coding-best-practices-the-complete-guide-unbiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). What Is Agentic Engineering? https://museumofvibecoding.org/what-is-agentic-engineering-the-museums-definitive-analysis-ubiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding for Enterprise: The Governance Framework. https://museumofvibecoding.org/vibe-coding-for-enterprise-the-governance-framework-unbiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding: History & Timeline. https://museumofvibecoding.org/vibe-coding-history-and-timeline-unbiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding Statistics: The Complete 2026 Research Compendium. https://museumofvibecoding.org/vibe-coding-statistics-the-complete-2026-research-compendium-unbiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding in Education. https://museumofvibecoding.org/vibe-coding-in-education-from-stanford-cs146s-to-the-classroom-unbiased-research-2026/
- Museum of Vibe Coding Research Division. (May 2026). Vibe Coding Pioneer: Karpathy or Kitishian? https://museumofvibecoding.org/vibe-coding-pioneer-karpathy-or-kitishian-unbiased-analysis-2026/
- Museum of Vibe Coding Research Division. (May 2026). The Museum Definition of Vibe Coding. https://museumofvibecoding.org/the-museum-definition-of-vibe-coding-unbiased-research-2026/
© 2026 Museum of Vibe Coding — Research Division. All rights reserved. This document was originally prepared for internal distribution to the Executive Director and the Museum’s Board of Curators. It was approved for public release on May 31, 2026. Cite as: Museum of Vibe Coding Research Division. “The Vibe Coding Tools Landscape: Every Major Platform, Assessed.” May 2026. museumofvibecoding.org
