Verdict
Bolt suits builders who want web and Expo mobile apps with a built-in database, hosting and a free security audit, from $25 a month 1,5,8,13. The catch is the experience: token use is hard to predict, Trustpilot reviewers report burned tokens and billing trouble, and getting a mobile app into the stores still means running Expo's tools yourself 3,13,29.
Good fit if you are
- Builders who want web and Expo mobile apps from one prompt-driven tool
- Developers who want to edit code in the browser and keep it synced with GitHub
- Teams prototyping on their own design system
Look elsewhere if you are
- Non-technical founders who need a one-click App Store release
- Buyers who want predictable monthly costs and responsive support
- Teams that need Python or PHP backends
Pros and cons
What we like
- Bolt Cloud bundles hosting, unlimited databases, sign-in, file storage, server functions and domains in one place 5.
- A security audit on paid plans reviews code and database, fixes most problems itself and uses no tokens 8.
- Builds iOS and Android apps with Expo, with a documented path to TestFlight, the App Store and Google Play 13.
- Direct editing in Code view, and GitHub sync that pulls outside changes every 30 seconds 10,12.
- Custom MCP connectors bring tools such as Notion, Linear and GitHub into the build 15.
What to watch
- Token use grows with project size, and reload and hosting overage prices are not published 3,6.
- Publishing to the app stores means downloading the code and running Expo's command-line tools yourself 13.
- Projects and chats are used for model training by default outside the EU, UK and Switzerland 20.
- No separate test and live environments are documented, and branches must be merged in GitHub 10.
- Subscriptions are non-refundable 2, and Trustpilot reviewers report billing and support problems 29.
Key facts
| Made by | StackBlitz |
|---|---|
| Pricing | Pro from $25/month for 10M tokens; Teams $30 per member/month; Enterprise by quote |
| Cost per builder | $25 a month (Pro plan with 10M tokens a month, billed monthly; includes custom domains, private projects and sites, and Pro hosting with 30 GB bandwidth and 1M requests a month) |
| Also requires | Custom domains, private sites and the security audit need a paid plan |
| What it builds | Web app, Native mobile apps, Database and backend |
| Tech stack | JavaScript frameworks with Node.js backends, and Expo for mobile 13,18; Bolt picks the models behind its Standard and Max agents, and its release notes name Anthropic's Claude Sonnet 4.6 and Opus 4.7 16,21; Forge runs open-source models such as GLM 5.3 and Kimi K3 4 |
| Works with | GitHub, Supabase, Stripe, Expo, Netlify, Figma, Google Stitch, Notion, Linear, Google SSO |
| Security reports | SOC 2 Type II |
| Free trial | No trial; free plan with 1M tokens a month |
What Bolt.new is
Bolt, sold at bolt.new, is an AI builder from StackBlitz, the company behind the WebContainers technology that runs Node.js in the browser 17. It builds websites, full-stack web apps and, through Expo, iOS and Android apps from a prompt 13,17. Bolt Cloud adds hosting, databases with sign-in and storage, server functions and domains, running on platforms such as Netlify and Supabase 5.
Forbes lists StackBlitz in San Francisco with about $105 million in total funding and a $700 million valuation after a Series B from investors including Emergence Capital and GV 26. Bolt launched in October 2024 27. In September 2026 Bolt added Forge, an agent on open-source models, and a $9 Lite plan built around it 4.
What it can do
You pick the Standard agent for everyday work or Max for large, complex projects, and Bolt chooses the models behind each 16. Projects run in the browser, and you can edit any file in Code view or lock files Bolt should not touch 12,17. Bolt saves versions you can preview and restore, though a restore leaves the database as it is 11. With GitHub connected, Bolt commits each working change and pulls outside edits every 30 seconds; branches are created in Bolt but merged in GitHub 10.
Publishing puts the app on a bolt.host address, or a custom domain on paid plans, and paid users can publish privately for invited viewers 7. Before launch, a security audit from the Publish menu checks who can see and change data, sign-in, input handling and leaked keys, and fixes most issues without using tokens 8. Mobile apps use Expo: you test on a phone with Expo Go, then download the code and run Expo's EAS tools to submit to TestFlight, the App Store or Google Play 13. Bolt's help pages say some runtime errors, such as a blank preview, are ones it cannot detect on its own, so you paste the console output into the chat 22.
- Actions. The Standard or Max agent plans, writes and troubleshoots code across the project 16. Bolt creates databases with sign-in, file storage and server functions as needed 5, adds Stripe payments 14 and builds Expo apps for iOS and Android 13.
- Setup. Start from a prompt, a Figma or Google Stitch design, a GitHub repository or a Lovable project 17; projects run in your browser on StackBlitz's WebContainers, so nothing is installed 17.
- Owning the code. Edit files in Code view 12, keep commits in step with GitHub both ways 10, or download the project as a zip and host it elsewhere 11.
- Analytics. Built-in hosting analytics show visitors, page views, top pages and bandwidth 21, and Teams admins see team analytics and usage data 19.
Pricing
Pro starts at $25 a month for 10M tokens with no daily cap; Bolt's own billing examples show $50 for 26M tokens and $100 for 55M 1,2. Annual plans cost $216 a year for 10M tokens a month or $540 for 26M 2. Unused paid tokens roll over for one extra month while you stay subscribed 3. Teams costs $30 per member a month, with tokens tied to each member 1. Most tokens go on syncing your project's files to the AI, so larger projects cost more per message 3. Token reloads are limited to the top monthly Pro tier and annual plans, at prices shown only in the app, and Pro hosting beyond 30 GB and 1M requests is pay-as-you-go up to a cap you set 3,6. One builder with a custom domain pays $25 a month 1. Subscriptions are non-refundable 2.
| Plan | Price | Includes |
|---|---|---|
| Free | $01,2 | 1M tokens a month with a 300K daily cap, public and private projects, bolt.host hosting with 10 GB bandwidth and 333,333 requests a month, Made in Bolt badge, no custom domains |
| Lite | $9/month (waitlist)4 | Forge open-source agent only; no custom domain, security audit, Supabase or badge removal; sign-ups close October 14, 2026 |
| Pro | From $25/month for 10M tokens, billed monthly; $50 for 26M; $100 for 55M1,2,3,6,8,16 | No daily cap, tokens valid two months, custom domains, private sites, Max agent, security audit, 30 GB bandwidth and 1M requests a month |
| Pro, annual | $216/year for 10M tokens a month; $540/year for 26M a month2 | Same features as monthly Pro, billed for 12 months up front |
| Teams | $30 per member/month, billed monthly1 | Everything in Pro plus centralized billing, admin controls, user provisioning and a private NPM registry; tokens are per member and not shared |
| Enterprise | Quote only1,25 | SSO, audit logs, compliance support, data governance and retention policies, deployment in your own AWS or Azure tenant |
| Extra usage | Not published3,6 | Token reloads on the top monthly Pro tier or any annual Pro plan, priced in the app; pay-as-you-go hosting above Pro limits up to a cap you set |
Security and data
Bolt says it is SOC 2 Type II compliant and offers the report through sales 17,24. It also cites GDPR and CCPA compliance, AES-256 encryption at rest, TLS 1.2 or higher in transit and yearly third-party penetration tests 24. A Model training setting, on by default except in the EU, UK and Switzerland, lets Bolt train on projects and chats created from October 7, 2026; you can turn it off 20. Team and Enterprise customers under an MSA or DPA are excluded from training 24. Forge works differently: prompts, code and edit histories are de-identified and shared with partners to train open-source models 4. Enterprise adds SAML single sign-on and a deployment inside your own AWS or Azure tenant 25.
- Security checks on your app. Paid plans run a security audit of code and database that checks data access, sign-in, input handling and leaked keys and fixes most issues itself; a database check for missing RLS policies runs on all plans 8,9
- Data residency. Not published for the hosted service; Enterprise can deploy into its own AWS or Azure tenant 25
- Training on your data. On by default for content from October 7, 2026, except in the EU, UK and Switzerland, with an opt-out; Team and Enterprise customers under an MSA or DPA are excluded; Forge sessions train partners' open-source models 4,20,24
- AI models. Anthropic Claude models named in release notes 21; open-source GLM, Kimi and DeepSeek models in Forge 4
What customers say
Bolt.new holds 4.3 from 97 G2 reviews, where users praise speed but flag token costs and trouble with complex projects 28, and 4.4 from 47 Product Hunt reviews 30. Trustpilot tells a different story: 1.6 from 204 reviews, mostly one star, citing burned tokens, charges after cancelling and slow support 29. Bolt shows logos of companies such as Google, Microsoft and Salesforce 23 and publishes one detailed story, from Digital Virgo, which says it cut time to launch from 12 months to 3.5 25.
| Platform | Rating | Reviews | Seen |
|---|---|---|---|
| G2 (Bolt.new)28 | 4.3 / 5 | 97 | 8 October 2026 |
| Trustpilot (Bolt.new)29 | 1.6 / 5 | 204 | 8 October 2026 |
| Product Hunt (Bolt.new)30 | 4.4 / 5 | 47 | 8 October 2026 |
What StackBlitz claims (not independently verified):
- 98% fewer errors because Bolt automatically tests, refactors and iterates 23
- Handles projects 1,000 times larger than before 23
- Trusted by Google, Microsoft, Salesforce, AWS, Meta and others (logo list) 23
- Digital Virgo cut time to launch from 12 months to 3.5 months with one codebase for web, iOS and Android 25
- Forge includes up to 50x more usage than the Standard agent 4
- ARR grew from $0 to $4 million in four weeks and to $40 million in six months, with over 5 million users, according to CEO Eric Simons 27
Concerns raised by others:
- Trustpilot rates Bolt.new 1.6 from 204 reviews, 83% of them one star, with complaints that tokens burn on the agent's own error fixing 29.
- Trustpilot reviewers also report charges after cancelling, refunds that are hard to get and slow support 29.
- G2 reviewers say Bolt struggles with complex projects and that token use climbs quickly on larger ones 28.
How we scored it
| Criterion | Why | Score |
|---|---|---|
| What it can do 30% of the total | Bolt builds full-stack apps on Bolt Cloud with a database, sign-in and one-click hosting 5,7, says it automatically tests and iterates on its code 23, and adds Stripe payments and MCP connectors 14,15, but its Expo apps reach the app stores only through Expo's tools run on your own computer 13. | 4/5 |
| Pricing 20% of the total | Plan prices and token amounts are public 1,2, but higher Pro tiers sit behind a selector, reload prices show only in the app and hosting overage has no published rate 3,6. | 4/5 |
| Control 20% of the total | Code view editing 12, two-way GitHub sync 10, version history with restore 11 and team roles with SSO on Enterprise 1,19 are documented, but separate test and live environments are not 10. | 4/5 |
| Security and data 15% of the total | Bolt is SOC 2 Type II compliant 17 and runs a built-in security audit on paid plans 8, but it trains on projects and chats by default outside the EU, UK and Switzerland 20 and lists no ISO certification 24. | 4/5 |
| Customer evidence 15% of the total | Its largest review base is negative: Trustpilot shows 1.6 from 204 reviews full of token, billing and support complaints 29, against 4.3 from 97 on G2 28. | 1/5 |
| Total | Weighted sum of the 5 levels, out of 10. | 7.1 |
Sources
- Pricing
- Billing
- Tokens
- Bolt Forge: build with open-source AI models in Bolt
- What is Bolt Cloud?
- Bolt Cloud hosting plans
- Publish your project to a live website
- Check your project's security
- Database: Security settings
- GitHub for version control
- Backups, restore, and version history
- Use Code view
- Expo for mobile apps
- Stripe for payments
- Connect to an MCP server
- Choose an agent
- Intro to Bolt
- Supported technologies
- Manage your team
- Account settings
- Release Notes
- Preview issues
- Bolt AI builder: Websites, apps & prototypes
- Security
- Bolt for Enterprise
- StackBlitz company profile
- 15 years after skipping college to launch 3 startups, I believe the taboo around questioning higher ed is holding an entire generation back (by StackBlitz CEO Eric Simons)
- Bolt.new Reviews
- Bolt.new Reviews
- Bolt.new Reviews
