# Integrate your Lovable Apps

You can connect Lovable to Aikido, run an Aikido Pentest, and fix findings without leaving your Lovable project.

You can watch the walkthrough below, or follow the step-by-step guide further down.

{% embed url="<https://www.loom.com/share/29ebaf7447484646b59a5f958900733e>" %}

<p align="center"><a href="https://www.loom.com/share/29ebaf7447484646b59a5f958900733e">Lovable Apps walkthrough - Watch Video</a></p>

{% hint style="warning" %}
By running a pentest, agents will try to find vulnerabilities in your application and will need to interact with it. This might result in test data being created in your app.
{% endhint %}

### Connect Lovable to Aikido

{% stepper %}
{% step %}
**Open connectors in Lovable**

In Lovable, go to your workspace settings and open the **Connectors** tab.

<div data-with-frame="true"><figure><img src="/files/4SKsLlSMQY4KN7Ev0qhB" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Add the Aikido connector**

Click **Aikido**, then click **Add connection**.

Give the connection a clear name, for example the name of your Aikido workspace.

<div data-with-frame="true"><figure><img src="/files/UzFlp0mZdD2KYWQuCqpr" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Confirm workspace-wide access**

Confirm that this connection will be accessible to everyone in your Lovable workspace.

<div data-with-frame="true"><figure><img src="/files/tTCob45B0hWaK4ZNaHSH" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Create an Aikido organization (if needed)**

If you don't have an Aikido organization yet, create one in the popup.
{% endstep %}

{% step %}
**Approve access for the right Aikido workspace**

Grant permission from Aikido to Lovable for the correct Aikido workspace.\
This is the workspace where your Lovable apps will be tested and where findings will appear.

<div data-with-frame="true"><figure><img src="/files/7FQ7LLNs8t6YFnELLgnE" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Confirm the connection is active**

Your Aikido workspace and Lovable workspace are now successfully connected.

<div data-with-frame="true"><figure><img src="/files/v0AbIOQOffNQJAGXK5aB" alt=""><figcaption></figcaption></figure></div>
{% endstep %}
{% endstepper %}

### Run a pentest from Lovable

{% stepper %}
{% step %}
**Open your project**

Go to your project in Lovable.
{% endstep %}

{% step %}
**Start the security flow**

Open the **Security** tab, or click **Review security** while publishing.

<div data-with-frame="true"><figure><img src="/files/PlOpe08R4cq74llue8QR" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Launch a new pentest**

In Lovable, click **Launch new pentest** to start the pentest setup flow.

<div data-with-frame="true"><figure><img src="/files/aErY1lYIJeqdgUtnSEfs" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Complete setup**

Go through the pentest setup flow in Aikido.

The most important part is configuring the right test users so Aikido can access authenticated parts of your app.

If you need help with test users, check:

* [How to Setup a Pentest](/pentests/configure-a-pentest/starting-an-assessment.md)
* [Setting Up Test Users](/pentests/configure-a-pentest/setting-up-authenticated-testing.md)
  {% endstep %}

{% step %}
**Start the assessment**

When everything is configured, click **Run assessment**.
{% endstep %}
{% endstepper %}

### Review and fix findings

When the assessment is finished, Lovable shows the findings directly in your project.

To remediate quickly, click **Fix all** and Lovable's agent will patch the vulnerabilities for you.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.aikido.dev/pentests/integrate-your-lovable-apps.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.