Business users are building applications with vibe coding tools and AI coding agents, often outside any approval process. Gartner predicts that by 2028, 60% of vibe-coded applications will be retired as they fail to deliver the predictable business value, and that 30% of software engineering teams will experience material capacity strain from maintaining vibe-coded applications built by citizen developers and business users. Get the latest thinking on how to govern vibe coding without blocking it.
What you’ll learn
- A two-layer governance model covering development controls and pre-deployment validation
- Gartner’s adaptive governance framework for deciding which use cases citizen developers should own, and which stay with engineering
- How to sandbox agents, mitigate prompt injection, restrict outbound data flows, and cap token spend
Gartner® Disclaimer
GARTNER is a trademark of Gartner, Inc. and/or its affiliates.
Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.
Gartner, Inc. Govern Vibe Coding for Citizen Developers With Self-Service Platforms, Nitish Tyagi, 29 June 2026
