How to build a website with AI in 2026: builder, Lovable or a studio, and where it all ends

Since June 2026, Lovable has billed both building and running an app (the database, sign-in, file storage and AI calls) from one pool of credits, so a website from an AI builder keeps spending credits after launch. How do you build a website with AI? In 2026 you have four paths: a hosted AI website builder, an app builder such as Lovable, Bolt or v0, WordPress with AI features, or a studio that designs and codes the site. The first three give you a first version fast. They differ in who owns the code, where the data lives, how Google sees the site and who looks after it a year from now.

This guide is for business owners who are deciding before anything gets built. If you already have an AI-built site and something on it is broken, start with our first-aid checklist for vibe-coded websites. If you are considering a site built from scratch, see what custom website development looks like, and the article on custom websites versus templates covers how it differs from off-the-shelf options.

Four ways to build a website with AI in 2026

An AI-assisted website either lives on a platform that also hosts it, or it exists as code you can take with you, and that choice matters more than which tool you pick.

Tool names change every month. The types of path stay the same, and each one leaves a different party owning the problems after launch.

• Hosted AI website builder. You describe your business and goal, the tool generates pages, design and copy, and the site runs on its platform. Since September 2026, WordPress.com on its Premium and Business plans generates a custom theme around your goals and brand, and further changes happen in a chat with an agent.
• App builder. Lovable, Bolt or v0 write real code, often with a database and sign-in. What you get is an application that behaves like a website, and with it the work of looking after data, hosting and security.
• WordPress with AI. WordPress 7.0, released on 20 May 2026, has an AI Client in core that lets the site talk to generative models, plus a Connectors screen for managing connected services. AI helps with content and features here, and the site stays on your hosting.
• Studio. A person designs, codes and hands over the site. The supplier answers for the result as agreed, and you receive the logins, the domain and the content.

Path	What you get	Who maintains the site	Where code and data live	Good fit when
Hosted AI website builder	Finished pages on the provider's platform	You in the editor or chat, the platform handles hosting	With the provider, export on its terms	You need a simple brochure site and platform lock-in does not bother you
App builder (Lovable, Bolt, v0)	Application code, often with a database and sign-in	You through prompts, a developer when things break	Code can be exported, data sits in a database that has to be secured	You are testing an idea, a prototype or an internal app
WordPress with AI	A site on your own hosting with an AI assistant in the admin	You or your site maintainer	On your hosting	You want to manage content yourself and own the site
Custom studio build	A designed and coded site with training	Content by you, technology by the supplier as agreed	Logins, domain and content belong to you	The site has to bring in enquiries and grow for years

If you do not know who will maintain the site a year from now, decide on the "Who maintains the site" column first. The look can change later. The operating model only changes if you build the site again.

Hosted AI website builder: a quick start, but the site stays with the provider

A hosted AI builder is the fastest route to a simple website, and the price is that the site, the hosting and often the domain are tied to one platform.

Most of these tools follow a similar flow. You enter what your business does, who the site is for and what style you want. The builder proposes a page structure, copy and images, and you adjust them in the editor or with further instructions in the chat. WordPress.com now has a feature called Annotate that sends several targeted edits to the agent at once.

This path makes sense for an online business card, a simple page for a local shop or a landing page that tests whether anyone wants your offer. It is a poor fit for a site that has to grow, connect to other systems or carry an online store.

What to watch out for

• Features depend on the plan. What the builder can do depends on what you pay for. WordPress.com generates a custom AI theme only on its Premium and Business plans.
• Copy needs checking. Google does not ban AI content, but under its guidance on generative AI content, generating many pages without adding value for users may violate its spam policy on scaled content abuse. It also recommends a manual review of titles, meta descriptions, structured data and image alt text.
• AI fills in what you leave out. According to the same document, a generative model does not retrieve facts, it predicts likely words. Without your prices, references and photos, it fills the site with generic sentences that can also be wrong. Our article what an LLM is and what AI cannot do explains why.
• Leaving the platform. Once a site outgrows the builder, moving to another solution often means a new site, redirects from the old addresses and a risk of losing search rankings.

Before you pay for the first month, find out how you get off the platform and what you can take with you. If the answer is "nothing but the text", plan on building the next site from scratch.

Lovable, Bolt and v0: AI builds the app, looking after it stays with you

An app builder writes real code, including a database and sign-in, so you get more options and, along with them, SEO, security and running costs that someone has to look after.

These tools are strong where you need more than static pages: a booking form with a database, a client area or an internal spreadsheet replacement for your team. Each such feature is a piece of software that runs, consumes resources and can be misconfigured. Below are three areas worth checking first.

SEO: what Google sees and what your tools see

According to Lovable's SEO documentation, apps created from 13 May 2026 (from 22 June 2026 on Enterprise plans) use TanStack Start with server-side rendering, so every request gets fully rendered HTML. Lovable pre-renders older React and Vite apps only for verified crawlers such as Google, Bing and AI search engines. Unverified bots and checking tools see the plain single-page app. An SEO tool may therefore report an empty page even though Google can see the content. Lovable suggests checking the output with the URL Inspection tool in Google Search Console, and older projects can be upgraded to TanStack Start.

Security and data: who sees the project and who sees the database

An UpGuard study from October 2026 found 16,326 Supabase databases with tables anyone could read, and more than half of them showed indicators of personal data. It names the cause: tables created through the API, which is how AI coding agents work, do not have row level security (RLS) enabled by default. What changes in Supabase at the end of October is covered in our article on the Supabase Data API and new tables.

The second issue is the tool's own settings. Lovable has two independent settings: project visibility in the editor (code and chat history) and access to the published app. According to Lovable, between 3 February and 20 April 2026 any Lovable user with a project link could reach the chat history and code of public projects. Lovable fixed the bug and switched historically public projects to private. According to its release notes, Bolt has offered a security audit of the whole project on paid plans since the end of July 2026, and when you publish you choose whether the site is public or private. Since 7 October 2026, Bolt also has a setting that controls whether it may use your projects and chats to train models. It is on by default, except for accounts based in the EU, the UK or Switzerland.

Costs: you also pay for the app to keep running

In an announcement on 13 June 2026, Lovable merged build credits and the separate Cloud and AI balance into one pool. That pool now also pays for the database, sign-in, storage, server functions and AI calls in the live app, and the dashboard shows usage per project. v0 deploys apps through Vercel and, for projects connected to GitHub, has merged and deployed changes to production with a single button since September 2026. Here too, hosting and its costs run with the tool's provider and need to be kept under control. As of October 2026.

Anyone who lets customers into an app-builder app without checking database access takes on the risk that a stranger gets to their data. A built-in security audit is a good start. It will not decide for you who may see which data.

WordPress with AI or a studio: AI assists, a person decides

If you want to own the site on your own hosting and manage the content yourself, AI belongs in the admin as an assistant, while a person handles the design, structure and technical foundation.

WordPress 7.0 added the AI Client to core, together with a Connectors screen where you manage all external connections in one place. It offers three presets or lets you add your own, and AI features start working once the connected service is authenticated. For a site owner, that means one more external service talking to the site. Whoever switches the connection on should know which service it is and what data the site sends to it.

A studio is slower to start and needs a larger one-off investment. The advantage is that a specific person is accountable for structure, speed and technical SEO. With us, a typical brochure site is ready from two weeks, and custom websites start at roughly €900. After we analyse your request, you get a specific quote with a fixed price, and we stick to it.

AI is useful on this path too. It can help you prepare the brief, first drafts of copy or a list of questions for your supplier. If someone else is building your site, ask them where they use AI in the process and who reviews the output.

If the site has to bring in enquiries, connect to your systems or run in several languages, choose WordPress with an AI assistant or a studio. If you are testing an idea for a few weeks, a builder is enough.

Where it all ends: ownership, data, SEO and running costs

In our experience, the problems with AI-built sites show up after launch, when the site has to be moved, fixed, measured or secured.

Ask these questions before you publish. You will find each answer in the tool's settings or documentation, with no coding needed.

Question before launch	Why it matters	Where to check
Can I take the code and content with me?	Without an export, leaving means rebuilding	Lovable: GitHub sync or code download on paid plans; v0: ZIP download; Bolt: project export
Who sees the project and who sees the live site?	Editor visibility and site visibility are separate settings	Project and publishing settings in the tool
Does the tool train models on my data?	Business copy and data can end up in training	Account settings, in Bolt the Model training option
Are the database tables protected?	Without RLS, anyone with the API address can read the data	Database settings, row level security in Supabase
Can Google see the page content?	An empty app does not show up in Google	URL Inspection in Google Search Console
Who pays for running it?	Credits and hosting keep running after launch	The tool's usage dashboard and invoices

What we see in practice

Our service page puts it in one sentence: websites from AI tools often look good, but they lack tests, security and SEO. The problem usually surfaces when something on the site needs changing and nobody is sure where the code is or who has access to the domain. On top of that come analytics and cookie consent, which need the same careful setup on an AI-built site as on any other. Our article on cookie banners and Consent Mode v2 explains what the banner should look like.

How we handle it at Denva: first we listen to what the site should achieve and who it is for, and we give you the scope, the timeline and a fixed price. You approve the design of the key pages before any coding starts, we build the site on clean code with an SEO foundation from day one, and after launch we train you. You receive the logins, the domain and the content. If we see a simpler or cheaper route, for example that a builder is enough for a start, we say so.

If you skip these questions, you end up dealing with them once the site already carries customers and every outage costs enquiries.

How to build a website with AI, step by step

The process has seven steps and AI does one of them; the rest are decisions and checks that stay with you.

1. Write down what the site should achieve. It could be enquiries, bookings, sales or a credible business card. Everything else follows from the goal.
2. Choose the path by who will maintain the site. Use the table above and be honest about how much time you will give it after launch.
3. Prepare your material. That means copy about the business, prices, contact details, photos and answers to the questions customers ask most. Whatever you leave out, AI fills with generic sentences.
4. Let AI create the first version. Refine it in small steps, one change per instruction, so you know which change broke what.
5. Check the settings before you publish. That covers project and site visibility, model training, code export and, for a database, table security.
6. Read everything the AI wrote. Go through the copy, titles, meta descriptions and alt text by hand, as Google recommends. Verify every number, price and promise.
7. After launch, check indexing and agree on maintenance. In Search Console, check that Google can see the pages, and decide who handles updates, backups and bugs.

When you can do it yourself and when to bring us in

You can handle it yourself if:

• you need a simple business card site or a landing page to test an offer,
• the site collects no personal data beyond a contact form,
• you have time to read the copy and go through the tool's settings yourself.

It is worth bringing us in if:

• the site has to bring in enquiries for years without losing search rankings,
• the app works with a database, sign-in or payments,
• the site has to connect to your systems or run in several languages,
• you already have an AI-built site and do not know where the code is or who has access.

For the last point, the right place is our service for fixing AI-built websites: we run an audit and fix the parts that are on fire, without a rewrite from scratch unless one is needed.

Conclusion: which path to choose

If you are testing an idea and the site only needs to live for a few weeks, choose a hosted AI builder or an app builder, go through the settings in the table before publishing and keep customer data out of it until the database has been checked. If the site has to bring in enquiries for years and you want to manage the content yourself, choose WordPress on your own hosting, with an AI assistant in the admin or with a supplier who hands over the logins, the domain and the content. If you cannot decide, write down the answer to one question: who will fix this site a year from now. If you do not know the answer, choose a path that lets you take the code and data with you.

FAQ

Frequently asked questions.

Can you build a website with AI for free?

A prototype, yes; long-term running, usually not. Free plans of AI builders come with limited credits and features. The Lovable free plan gives 5 build credits a day (up to 30 a month), 20 Cloud credits a month and 4 credits for AI features in your app, and downloading the code is available on paid plans only. Always check the current pricing page of the tool. As of October 2026.

Will Google see a website built by AI?

Yes, if the site returns readable HTML and the content is useful to visitors. Google does not ban AI content; the problem is mass-generating pages without added value. For apps from builders, check that pages are rendered on the server and confirm the result with URL Inspection in Google Search Console.

Who owns the code of a website from an AI builder?

In practice, you own what you can take away and run elsewhere. Lovable offers GitHub sync and, on paid plans, a code download; v0 offers a ZIP download and Bolt a project export. Hosted website builders usually tie the site to their platform, so check what the export contains before you launch.

Is a website built with Lovable or Bolt secure?

It can be, if access to both the project and the database is set up correctly. Bolt offers a project security audit on paid plans, yet an UpGuard study from October 2026 found 16,326 Supabase databases with tables anyone could read. If the app handles customer data, have it checked before launch.

When is a studio a better choice than an AI builder?

When the site has to bring in enquiries for years, connect to other systems or run in several languages. A studio is accountable for structure, speed and technical SEO, and you receive the logins, the domain and the content. At Denva, custom websites start at roughly €900 and a typical brochure site is ready from two weeks.