Base44 Review, Fast to a Demo and Slow to a Real App
Base44 builds a working app with login and a database from one prompt. Where it stalls, what the code export really gives you, its security record and the reviews.
The costly mistake with Base44 is judging it by the first hour. The first hour is where it shines. A login page, a database and a live link show up from one prompt, and it feels done. The bill comes later, when your app needs custom rules, real users and a way off the platform. So judge it by the second month instead, and plan your exit before you build.
Base44 is an AI app builder owned by Wix. You describe an app in plain words, and it writes the screens, the data tables and the logic, then hosts it. We fix stalled AI-built apps for a living, so this review leans on the parts the demo videos skip. Every figure below links to where it came from.
Inside This Post
9 sections
What Base44 Is, and Who Owns It
Base44 is a prompt to app builder. You don't connect a database or set up hosting. It does both for you.
It was founded in Israel by Maor Shlomo. Wix bought it in June 2025, for an $80 million first payment plus milestone payments through 2029, as Globes reported. At the time it had six employees.
Under the hood, Base44's project structure docs say every app is a standard React app built with Vite and styled with Tailwind. That matters later, when you ask what you can take with you.
Which AI builds your app? By default, Auto mode picks a model for each request. On Builder and above you can choose one yourself. Base44's chat modes page lists Claude Sonnet 5.5 and Opus 5.5, Gemini models and GPT models. It warns that picking by hand can use more credits than Auto.
Where Base44 Is Strong
Day one is fast. Login, a database, file uploads and hosting are part of every app. Most builders make you wire those up yourself, often with a separate Supabase or Firebase account.
Non-coders can finish small tools. An internal dashboard, a booking form, a simple client portal. These fit inside the platform's defaults, and the defaults are good.
Planning is cheap. Discuss mode answers questions about your app for about 0.3 message credits each, per the same chat modes page. Dragging and typing in the visual editor costs nothing.
It has a real security scan now. Base44's security scan docs say it checks data permissions, exposed secrets, backend functions anyone can call without signing in, missing browser headers and risky libraries. The basic scan works on every plan, even Free. Scanning your own code for flaws needs Builder or above.
Where It Stalls
It matters most if you plan to charge money or hold real customer data.
Custom logic gets expensive. Reviewers who go past simple screens describe the same thing. Rules like "managers see their team, not the whole company" take round after round of prompts. Each round costs credits, and our Base44 pricing breakdown shows the credit rate barely drops from Starter to Pro. Credits also expire every month.
Fixes that miss still cost. Base44 doesn't refund credits for AI mistakes. When the AI breaks one thing while fixing another, you pay for both rounds. That loop is the most common complaint in the reviews below.
Your database now has a ceiling. Apps created from October 18, 2026 get a size limit by plan, per Base44's app data docs.
Free apps get 200 MB, Starter 2 GB, Builder 5 GB and Pro 10 GB. Elite gets 25 GB and Business 50 GB.
When an app's database is full, it can't add new records until you delete some or upgrade. Uploaded files don't count toward it.
Security is still your job. The scan docs say it plainly. The scan doesn't fix anything on its own, it doesn't block you from publishing, and you are responsible for your app's security. They also note Base44 admins can access your data if needed.
Can You Leave Base44 With Your App?
Partly. This is the question to answer before you build, not after.
| What you want to take | Can you? | How |
|---|---|---|
| Your data | Yes | CSV export from the Data dashboard, one table at a time |
| Your frontend code | Yes | GitHub two-way sync on Builder or above, or a zip export |
| Your backend logic | Only to another Base44 project | base44 eject, into a new Base44 backend |
| A copy that runs on your own servers | Not as the docs describe it | The frontend calls Base44's backend through its SDK |
The GitHub sync docs say two-way sync needs Builder or above, the branch must be named main, and you can't roll back to versions from before you connected GitHub. The zip export is a beta API, per the export docs. The eject docs say an ejected project gets a new app ID and an empty database.
So the screens are portable. The data layer isn't. Moving to your own stack means rewriting how the app talks to its database and its logins. That's real work, not a weekend.
Its Security Record
In July 2025, researchers at Wiz found a flaw that let anyone register for a private Base44 app using only its app ID. That ID shows up in the app's URL. It got past every access control, including single sign on, according to Wiz's write-up.
Wix fixed it within 24 hours of the report. Wiz verified the fix the next day, and Wix said it found no sign anyone abused it. The fix covered every app, so owners didn't need to do anything.
A fast fix is a good sign. The flaw is still a lesson. When the platform runs your logins, one bug in the platform is a bug in every app on it.
What Users Say
Base44's Trustpilot page shows a TrustScore of 2.7 out of 5 across 916 reviews.
Almost nobody lands in the middle. The 5 star reviews praise how fast a non-coder can ship something that works. The 1 star reviews mostly cover credits spent on wrong or repeated fixes, slow support, and refunds refused on yearly plans. Base44 replies to about half of the bad reviews, per the same page.
Read that split as a warning about fit, not quality. People building small tools leave happy. People who hit the wall in the middle of a bigger build leave angry, and they often paid for a year first.
Our Verdict, by What You're Building
| You want to build | Base44 fit | Why |
|---|---|---|
| A prototype to show investors or a client | Strong | Fastest route to a live link with real logins |
| An internal tool for a small team | Strong | Built-in auth and data cover it |
| A paid product with tricky permissions | Weak | Custom rules eat credits, and the backend stays on the platform |
| An app holding health, money or legal data | Weak | You're trusting one platform's auth, and its admins can see data |
| Something you plan to move off later | Plan first | Data and screens come with you, the backend doesn't |
If you're still picking a builder, our guide to choosing your first AI coding tool compares the field.
Bad Advice We Keep Seeing
"Export the code and you own your app." You own the screens. The data tables, entities and backend functions still run on Base44, and the export docs say the zip API is beta.
"Start on monthly and switch to yearly once it works." That one is sound advice. The mistake is the reverse. Yearly plans and refused refunds come up again and again in the 1 star reviews. Stay monthly until the hard feature works.
"The security scan means it's secure." The scan reports. It doesn't fix, and it won't stop you from publishing an app with open data.
"Keep prompting until it fixes itself." If the same fix fails twice, stop. Revert to the last good version and describe the problem differently, or use Discuss mode to plan first. Our piece on why vibe-coded projects stall covers that loop.
Still Wondering?
- Is Base44 legit?
Yes. It's a real company owned by Wix, which bought it in June 2025. Whether it fits you depends on what you build. It's strong for prototypes and small tools and weaker for complex paid products.
- Is Base44 an Israeli company?
It was founded in Israel by Maor Shlomo, and Wix bought it in June 2025. It now runs as a Wix-owned product.
- Does Base44 use ChatGPT?
It can. Auto mode picks a model for each request, and on Builder or above you can choose GPT, Claude or Gemini models yourself. Base44 says picking by hand can use more credits.
- Can I build a website with Base44?
Yes, but it's built for apps with logins and data. For a plain business website, a regular site builder is usually simpler and cheaper.
- Is Base44 safe to use?
It fixed a serious login flaw within 24 hours in July 2025 and now offers a built-in security scan. Base44's own docs say you are still responsible for your app's security, so run the scan and read every warning before you publish.
- How much does Base44 cost?
Plans run from free to $200 a month, and yearly billing takes 20% off. The free plan gives 25 message credits a month. The full plan by plan breakdown is in our Base44 pricing guide.
If your Base44 app has stalled halfway, our project rescue page is where we pick those up.
Like this guide? Add Vyebe as a preferred source on Google and see more of our posts when you search.
The Paper Trail
- Globes, Wix acquires Israeli vibe coding co Base44, deal terms and team size, accessed October 2026
- Base44 docs, Project structure, React, Vite and Tailwind and the SDK, accessed October 2026
- Base44 docs, AI chat modes, model choice and Discuss mode credits, accessed October 2026
- Base44 docs, Running a security scan, what the scan checks and what it doesn't, accessed October 2026
- Base44 docs, Managing your app data, CSV export and database limits by plan, accessed October 2026
- Base44 docs, GitHub, two-way sync rules, accessed October 2026
- Base44 docs, Export app source code, the beta zip export, accessed October 2026
- Base44 docs, eject, cloning an app into a new project, accessed October 2026
- Wiz Research, Critical vulnerability in Base44, the July 2025 flaw and its timeline, accessed October 2026
- Trustpilot, base44.com reviews, TrustScore and star split, accessed October 2026
- Base44 pricing, plans and credits, accessed October 2026
Stalled somewhere in here?
Send us the project and what's blocking you. You'll get a straight read on what's actually wrong, including if it's something you can fix yourself.
Tell us what happenedWorth Reading
4 Ways to Use Claude Code With GitHub, and Undo Mistakes
Connect Claude Code to GitHub four ways, from plain git to @claude in pull requests and cloud sessions. Setup, real costs, and how to undo a bad change.
Build NotesSteer Claude Code From Your Phone With Remote Control
Claude Code Remote Control lets your phone drive a session running on your own computer. Setup, server mode, push alerts, safety and the errors that block it.