VentureBeat 11月06日 23:03
AI 辅助编码:企业应用开发的新趋势
index_new5.html
../../../zaker_core/zaker_tpl_static/wap/tpl_guoji1.html

 

文章探讨了AI辅助编码(Vibe coding)在企业应用开发中的应用。虽然AI辅助编码能显著提升开发速度,尤其适合快速原型设计和最小可行产品(MVP)的构建,但其在生产级企业应用开发中的安全性、治理和可信基础设施方面存在挑战。文章区分了“绿色区域”(UI/UX)和“红色区域”(业务逻辑、数据层),建议在绿色区域广泛应用AI辅助编码以提高敏捷性,而在红色区域则应谨慎使用,通过上下文感知工具增强开发者能力,并强调核心基础设施不应完全依赖AI。Salesforce推出的Agentforce Vibes等企业级解决方案,旨在通过集成治理和安全措施,实现AI辅助开发在企业环境中的安全高效应用,已被Coinbase、美国某大型银行等企业采纳,显著提升了开发效率和业务成果。

🟢 **AI 辅助编码的“双刃剑”效应**:AI辅助编码(Vibe coding)以其极高的开发效率,能够快速将想法转化为可工作的原型,对于快速迭代和概念验证具有巨大优势。然而,文章指出,在企业级生产应用开发中,这种速度可能伴随着前所未有的风险,包括引入安全漏洞(如硬编码敏感信息、使用不安全的幻觉包)、产生难以维护的“意大利面条式代码”以及技术债务的累积。AI模型往往难以理解和遵循企业特定的安全策略和架构模式,导致效率提升的同时,潜在的维护和安全隐患也随之增加。

🔴 **企业级 AI 编码的“红绿区”划分**:为了安全有效地利用AI辅助编码,文章提出了“绿色区域”和“红色区域”的概念。“绿色区域”指应用的用户界面(UI)和用户体验(UX)层,是AI辅助编码最适合发挥优势的领域,可以快速构建和迭代。而“红色区域”则包括了应用的核心业务逻辑、数据层以及基础设施等关键支柱,这些部分需要更高的信任度、控制力和严格的治理。直接使用通用AI工具在红色区域进行开发,尤其是在基础设施和安全配置方面,可能带来灾难性后果。

🤝 **混合方法:AI 增强而非替代开发者**:文章强调,AI辅助编码并非要取代开发者的角色,而是作为一种强大的辅助工具来增强开发者的能力。成功的企业级AI辅助编码解决方案,如Salesforce的Agentforce Vibes,能够提供上下文感知能力,理解企业特有的业务流程和数据,充当“代码对编程”的搭档,帮助开发者更快速、准确地起草复杂逻辑或建模数据。关键在于选择适合企业环境的工具,这些工具内置了治理、安全和上下文信息,能够安全地协助开发,特别是在红色区域,而不是让AI独立完成核心基础设施的配置,以确保稳定性和合规性。

Presented by Salesforce


Vibe coding — the fast-growing trend of using generative AI to spin up code from plain-language prompts — is quick, creative, and great for instant prototypes. But many argue that it's not cut out for building production-ready business apps with the security, governance, and trusted infrastructure that enterprises require. In other words, a few saved hours in development can mean a future full of security vulnerabilities, endless maintenance, and scalability headaches, says Mohith Shrivastava, principal developer advocate at Salesforce.

"For rapid experimentation, building minimum viable products, and tackling creative challenges, vibe coding is a game-changer," Shrivastava says. "However, that same speed and improvisational nature are exactly what makes its application in a professional, enterprise setting a topic of intense debate. And the skepticism from the developer community is 100% justified."

Risks and rewards of vibe coding

The excitement is all about speed: going from a rough idea to a working prototype in hours, not weeks, is a massive advantage. But as Shrivastava shared, developers have been vocal about the potential downsides.

"When you apply vibe coding indiscriminately to an entire application stack, you’re not just moving fast; you’re accumulating risk at an unprecedented rate," Shrivastava explains. "The cons are significant."

That includes potential security nightmares, as AI models don't typically take into consideration the company's specific security policies. They can easily introduce vulnerabilities like hardcoded secrets or use insecure, hallucinated packages. Then there’s the issue of what Shrivastava calls "spaghetti code on steroids," or verbose code that lacks a coherent architectural pattern, creating a mountain of technical debt.

Equally concerning is the illusion of progress: vibe coding may complete 80% of a feature in record time, but the remaining 20% — the edge cases, performance tuning, and compliance work — becomes exponentially harder.

But does this mean vibe coding has no place in the enterprise?

"The idea that you can just vibe your way to a complex, secure, and maintainable enterprise application is a dangerous fantasy," Shrivastava says. "But — the pros are undeniable if it's used correctly. The key is not to avoid vibe coding, but to apply it intelligently in your enterprise."

Red and green zones: Enterprise-grade vibe coding

You can't, and you absolutely should not, vibe code your entire enterprise stack with just any generic tool, Shrivastava warns. But when paired with no-, low-, or pro-code tools that are built for the enterprise, many of the gaps can be addressed. An enterprise-grade vibe coding solution, for example, can automatically scan for security issues, flag performance bottlenecks, and provide a safety net.

It’s also critical to understand which parts of an application suit this approach — and which demand a higher level of trust and control. Shrivastava divides the stack into red and green zones to illustrate.

The green zone is the presentation layer, or the UI and UX. It’s ideal for vibe coding, where developers can move fast and iterate quickly without much risk. In contrast is the red zone, which covers the foundational pillars of an application, including business logic and data layers.

Empowering developers in the green zone

Developer expertise remains the foundation for effective and safe vibe coding. But developers can be amplified by AI tools and emerging agents that are grounded in business context, connected to real applications, integrations, and data flows.

"A generic AI agent can't grasp your company's unique processes, but a context-aware tool can act as a powerful pair programmer, helping a developer draft complex logic or model data with greater speed and accuracy," Shrivastava says. "It’s about making the expert developer more efficient, not trying to do their job for them."

Some areas will always be high risk for ungoverned AI — especially infrastructure and security. Letting a generic AI agent configure firewalls or Identity and Access Management [IAM] policies without oversight, Shrivastava warns, is a recipe for disaster. The solution isn’t to avoid the red zone entirely, but to approach it with the right tools — ones that embed governance, security, and context from the ground up.

"The winning strategy is clear: Vibe code the green zone for agility, approach the red zone by augmenting your developers with powerful, context-aware tools, and never, ever DIY your core infrastructure with AI," he says.

Embracing enterprise vibe coding

To harness the power of enterprise vibe coding, Salesforce developed Agentforce Vibes. This new vibe coding offering for the enterprise includes Agentforce, an autonomous AI agent built to collaborate like a pair programmer on the Salesforce Platform. It’s designed precisely to provide developers with the right tools for the job, covering both the green and red zones. For the green zone, it offers the speed and agility to rapidly build UIs and prototypes. But its true power lies in how it augments developers in the red zone.

"Enterprise vibe coding like Agentforce lets organizations take AI-assisted development to the organizational level, accelerating coding, testing, and deployment, while ensuring consistency, security, and performance," says Dan Fernandez, VP of product, developer services at Salesforce. "It's not about throwing away governance for speed; it’s about integrating AI into every stage of the application lifecycle to work smarter."

Because Agentforce Vibes’ tooling is deeply integrated with your business context on the platform, it can safely assist with business logic and data modeling. Most importantly, it operates on a trusted platform. Instead of a DIY approach — jury-rigging a generic AI agent to handle your networking — developers build on a foundation that has security and governance built in, so they can innovate safely, knowing the most critical layers of the stack are secure and compliant.

Major enterprises are putting vibe coding to work

Agentforce Vibes users are now tapping the tool to build around 20 to 25% of their new code base, according to Salesforce data, and users are accepting around 1.2 million lines of agentic code per month. That includes companies like Coinbase, CGI, Grupo Globo, and one of the top five banks in the U.S., which is using Agentforce Vibes capabilities to develop production-ready apps faster.

Agentforce Vibes is part of a suite of tools in Agentforce 360 that span from no-code and low-code to pro-code development. These tools are together helping customers develop and deploy at speeds previously unheard of.

With the low-code Agent Builder in Agentforce, the Secret Escapes team was able to build, test, and launch their agent to support customer service in just two weeks, compared to the six months it had previously taken the company to build and train a bot.

With Agentforce, 1-800Accountant autonomously resolved 70% of customer chat engagements during tax week in 2025, without writing a line of code, using Salesforce’s low-code tools and AI assistance. Meanwhile, media company Grupo Globo deployed agents to identify subscribers at risk of lapsing, offer personalized upgrades, cross-sell, and convert non-subscribers. As a result, Agentforce boosted Globo’s retention rates by 22% in less than three months.

Innovation meets discipline

Enterprise tools show that disciplined engineering and creative experimentation can coexist — and that balance, Shrivastava says, is the key to lasting innovation.

"Vibe coding is not a fad, but it's also not a silver bullet that will replace disciplined software engineering," Shrivastava says. "The smart path forward is a hybrid approach where human software skills are augmented with agentic intelligence. This balanced approach is how you get the best of both worlds: radical innovation at the edge and unwavering stability at the core."


Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact sales@venturebeat.com.

Fish AI Reader

Fish AI Reader

AI辅助创作,多种专业模板,深度分析,高质量内容生成。从观点提取到深度思考,FishAI为您提供全方位的创作支持。新版本引入自定义参数,让您的创作更加个性化和精准。

FishAI

FishAI

鱼阅,AI 时代的下一个智能信息助手,助你摆脱信息焦虑

联系邮箱 441953276@qq.com

相关标签

AI辅助编码 Vibe coding 企业应用开发 Salesforce Agentforce Vibes AI in enterprise Generative AI for code AI governance AI security Low-code Pro-code Developer productivity
相关文章