Morphotech Limited

Morphotech Limited UK User-centric software development.

A $6.6 billion platform left thousands of projects exposed for 48 days. Not because the AI did something unexpected. Bec...
10/06/2026

A $6.6 billion platform left thousands of projects exposed for 48 days. Not because the AI did something unexpected. Because nobody reviewed what it built.

Lovable, one of the fastest-growing vibe coding platforms in history, recently disclosed a vulnerability that allowed anyone with a free account to access another user's source code, database credentials, and personal data, in as few as five API calls. A security researcher reported it. The bug bounty report was closed without escalation. Existing projects were never patched.

This is not an isolated incident. Studies from Q1 2026 show that 91.5% of vibe-coded applications contain at least one vulnerability traceable to AI hallucination. Between 40 and 62% of AI-generated code contains security flaws. More than 60% expose API keys or database credentials in public repositories.

The pattern is the same across every major platform in the category.
Vibe coding is a genuinely powerful tool. It removes barriers, accelerates early exploration, and puts building in the hands of people who couldn't build before. That's real and worth acknowledging.

But there is a difference between using AI to move fast and using AI as a substitute for engineering judgment. The first is a competitive advantage. The second is a liability that compounds quietly until it isn't quiet anymore.
The founders who build products that last are the ones who understand where AI can run and where it needs a human standing next to it.

Link to the full article in the comments.

morphotech.com
Moving Mountains

Our UI/UX Designer Nathalia took the team through something that rarely gets talked about openly: what designers actuall...
03/06/2026

Our UI/UX Designer Nathalia took the team through something that rarely gets talked about openly: what designers actually do before anyone sees a single screen.

Not the Figma files. Not the prototypes. The thinking that makes those things worth building in the first place.

She walked through design thinking not as a buzzword, but as a mindset: the difference between a team that builds what they assume users need and a team that goes and finds out. The empathy phase. The definition of the real problem. The ideation that only works when it's collaborative. The prototyping and testing that tells you whether your ideas survived contact with reality.

MorphoTalks are our internal knowledge-sharing sessions. Every talk is a reminder that the best products don't come from the best tools. They come from teams that keep learning.

Thank you, Nathalia.

morphotech.com
Moving Mountains

Yesterday, part of the Morphotech team spent the day at JNation, one of Portugal's best technical conferences for Java, ...
27/05/2026

Yesterday, part of the Morphotech team spent the day at JNation, one of Portugal's best technical conferences for Java, JVM, and JavaScript ecosystems.

More than enough opinions for the conversation that followed. A few talks that sparked the most discussion:

Verifiable credentials and digital identity - the next frontier in how users prove who they are without exposing everything about themselves. A topic closer to home than most people realise, given the work we've been doing in this space.

Prompt injection in LLM applications - the security conversation the AI community needs to have more loudly. As developers integrating AI into production systems, this one hit close.

Agent protocols - MCP, A2A, AG-UI, A2UI. The plumbing of the agentic web is being standardised in real time. Understanding it now is not optional.

And a talk on transitioning from engineer to technical lead that was more honest about the difficulty of that shift than most leadership content manages to be.

We left with more to think about than when we arrived. That's the point.

morphotech.com
Moving Mountains

Every engineering team has said some version of this: "We'll do a proper security review before we go to production."It ...
20/05/2026

Every engineering team has said some version of this: "We'll do a proper security review before we go to production."

It sounds responsible but it isn't. Not because teams don't mean it, they usually do, but because the belief underneath it is structurally false.
Security is not something you add to code. It is either a property of the code or it isn't. The decisions that determine it are made constantly, across thousands of lines, by individual developers under time pressure, and most of them are not easily revisited after the fact.

Deferring security to a later phase doesn't buy you time. It compounds decisions that will each need to be individually unpicked, evaluated, and corrected. The cost doesn't stay flat while you wait.

Our CTO Vítor Oliveira wrote about what this actually means in practice, why the myth persists, what structurally secure code looks like, where tooling fits and where it doesn't, and what the real cost of "later" is.

🔗 Link in the comments.

morphotech.com
Moving Mountains

Last week, Vítor Oliveira, our CTO, attended the Tech Hiring Community Conference in Lisbon.The session that stayed with...
13/05/2026

Last week, Vítor Oliveira, our CTO, attended the Tech Hiring Community Conference in Lisbon.

The session that stayed with him was the panel on the uncomfortable truths behind AI enthusiasm. The conversation went where most panels avoid: the real story behind the wave of tech layoffs, whether AI is genuinely replacing people or just giving companies cover to do what they already wanted to do, and what actually happens to jobs when the enthusiasm settles into something more honest.

The companies that will come out of this moment well are not the ones moving fastest with AI. They're the ones being clearest about why.
That distinction matters enormously for how we build products and teams at Morphotech.

It was a great afternoon, with some amazing takeaways. Thank you for the invite and see you next year!

morphotech.com
Moving Mountains

06/05/2026

Some members of the Morphotech team took the half of the afternoon off to watch the new Super Mario Galaxy movie together. Just the team, a big screen, and a galaxy worth of nostalgia.

These are the moments that remind us why building a great team matters as much as building great products.

morphotech.com
Moving Mountains

Excited to welcome Pedro Matos to Morphotech as a Full-Stack Engineer!Pedro brings 10 years of experience building large...
29/04/2026

Excited to welcome Pedro Matos to Morphotech as a Full-Stack Engineer!

Pedro brings 10 years of experience building large-scale platforms across e-commerce, telecom, logistics, and analytics. He's been a developer, a lead, an architect, and a mentor, often on the same project. Pedro brings the kind of range that only comes from having shipped real products under real pressure.

That breadth, technical and contextual, is exactly what we look for.

Welcome to the team, Pedro.

morphotech.com
Moving Mountains

Excited to welcome João Gradim to Morphotech! 14 years of experience. Startups, acquisitions, international teams, produ...
22/04/2026

Excited to welcome João Gradim to Morphotech! 14 years of experience. Startups, acquisitions, international teams, products at scale. João has been in the rooms where things go wrong and figured out how to make them right.

That kind of experience doesn't just make someone a better engineer. It makes them someone who understands what's at stake when software fails, and why getting it right the first time matters. That mindset fits exactly who we're trying to be.

Welcome to the team, João. Glad to have you.

morphotech.com
Moving Mountains

There's a question every engineering team is navigating right now: as AI takes on more of the code, where do humans actu...
15/04/2026

There's a question every engineering team is navigating right now: as AI takes on more of the code, where do humans actually fit?

Martin Fowler's blog recently put a name to something worth paying attention to. Beyond "in the loop", where developers review every AI output, and "out of the loop", where systems run largely autonomously, there's a third position emerging: "on the loop."

On the loop means humans aren't reviewing every line. They're designing the specifications, tests, constraints, and feedback mechanisms that determine how AI behaves in the first place. The work shifts from ex*****on to architecture of intent.

This distinction matters enormously for how software gets built, and for what separates teams that use AI responsibly from teams that simply use AI quickly.

At Morphotech, this is how we think about it. AI accelerates. Humans define what it's accelerating toward, and what it's not allowed to do along the way. The engineering discipline doesn't disappear. It moves upstream.

The full article is worth reading. Link in the comments.

morphotech.com
Moving Mountains

Amazon called a mandatory meeting for its engineers recently.The agenda: a “trend of incidents” with a “high blast radiu...
08/04/2026

Amazon called a mandatory meeting for its engineers recently.

The agenda: a “trend of incidents” with a “high blast radius.” The contributing factor listed in the briefing note: “novel GenAI usage for which best practices and safeguards are not yet fully established.”

One of their AI coding tools deleted and recreated an entire environment. A six-hour outage followed. Then another. Then a 90-day code safety reset across critical systems.

This isn’t a story about Amazon failing. It’s a story about what happens when speed outpaces governance, at any scale, in any organisation.

AI doesn’t introduce risk. It amplifies whatever is already there. Shaky deployment practices become outages. Unclear ownership becomes a “high blast radius.” The speed that made AI attractive is the same speed that makes the damage significant.

The answer isn’t to slow down AI adoption. It’s to build the operational discipline before you need it. Not after an incident forces the conversation.

We wrote about this recently. The link is in the comments.

morphotech.com
Moving Mountains

Address

11 A(ii) Park House, Milton Park
Abingdon
OX144RS

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Telephone

+441865306000

Alerts

Be the first to know and let us send you an email when Morphotech Limited posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Morphotech Limited:

Share