With middle managers becoming more important as the mechanism that manufactures coherence, many traditional management practices no longer fit how organizations operate.
Adaptive AI governance implements automated policy enforcement with the introduction of policies-as-code.
A model may perform exceptionally well and still lack the evidence package necessary to support regulatory review.
Canva on Tuesday launched Canva Code 2.0, a major upgrade to its AI-powered coding tool that lets users build interactive websites, apps, and experiences using plain-language prompts — and then edit the results as easily as tweaking a Canva presentation. The feature is now available to all of the company’s more than 265 million monthly users across every pricing tier, including free accounts.
The move is Canva’s most aggressive push yet into the fast-growing “vibe coding” market, a category that barely existed 18 months ago but has already minted billion-dollar startups and reshaped how non-developers think about building software. But where rivals like Lovable, Replit, and Bolt.new have focused primarily on generating functional code from text prompts, Canva is making a different bet: that the real bottleneck isn’t creating the code — it’s making the output actually look good.
“Most vibe coding tools stop at functional — generating output that looks the same as everyone else’s,” Canva states in its announcement. “You might get a working prototype, but making it actually look like yours requires a complex editing surface, a separate design tool, a developer, or endless back-and-forth prompting that rarely lands where you want it.”
Danny Wu, Canva’s Head of AI Products, framed the product’s positioning in stark terms during an exclusive interview with VentureBeat ahead of the launch.
“We are deliberately targeting non-technical users,” Wu said. “Canva Code isn’t a tool we’re building for developers. What we’re trying to do is bring the power of AI coding — and really lightweight coding — into the Canva platform, while answering our users’ requests for more interactivity, more customization, and more flexibility, from websites to interactive presentations.”
The update introduces several capabilities designed to collapse the distance between generating code and publishing a polished interactive experience. Users can now create Canva Code projects directly inside other design projects — embedding interactive elements within a whiteboard, presentation deck, or standalone page. Canva has also added more than 50 new templates specifically designed for interactive designs, along with the ability to import raw HTML files from other AI coding tools and convert them into editable Canva designs.
The performance improvements are significant. Canva says it has reduced average code generation time by 75 percent and cut the median time from initial prompt to a published site by 30 percent. The company also reports that integrating Canva Code into the broader Canva editor — allowing users to treat coded outputs like any other design element — has increased active Code users by 25 percent.
Perhaps the most distinctive feature is the editing experience itself. Unlike most AI coding platforms, which require users to re-prompt or modify raw code to make visual changes, Canva Code 2.0 lets users click directly into generated elements to change text, drag and drop images from Canva’s built-in library of over 120 million templates and assets, update colors and fonts through a familiar toolbar, or select a specific element and refine it through conversational AI. Every output is fully interactive and automatically adapts to different screen sizes, with a built-in mobile preview.
Wu demonstrated the drag-and-drop editing during the interview, showing how a generated conference website could be modified in real time — swapping in photos, changing fonts to branded alternatives, and editing text directly on the canvas. “The key differentiator with Canva Code is the editability and the kindness of the outputs it generates,” he said, though he noted one current limitation: “We don’t support moving elements around. You still have to re-prompt for that.”
Canva’s entry into vibe coding at this scale arrives at a pivotal moment for the category. According to market research published by Luminix AI in May 2026, the vibe coding and AI app builder market has reached an estimated $4.7 billion in 2026, with projections pointing toward $12.3 billion by 2027 at roughly 38 percent compound annual growth. The research also estimates that AI-generated code now comprises approximately 41 percent of all code written globally — a figure that would have seemed inconceivable even two years ago.
The competitive landscape has grown ferocious. Lovable, which focuses on conversational, design-forward app generation for non-technical founders, has achieved what may be the fastest revenue ramp in the category’s history — reportedly reaching approximately $400 million in annual recurring revenue by early 2026, according to Luminix’s analysis. Replit, which transformed its browser-based IDE into a full vibe-coding engine through successive AI agent releases, has tripled its valuation to $9 billion and is targeting $1 billion in run-rate revenue by the end of 2026, per the same report. Bolt.new, which runs a full Node.js environment entirely in the browser, scaled from $4 million to $40 million in ARR within months of launching.
And then there is Canva, which brings something none of those platforms possess: a quarter-billion-user design ecosystem where brands, teams, and individuals already store their visual identities, collaborate on projects, and publish content.
Wu positioned Canva Code not as a direct competitor to these developer-focused tools but as something that fills a gap none of them have addressed. “A lot of the requests that we have been getting and the usage we’re seeing is actually with using Canva Code not necessarily as just one artifact, but as part of an overall design, the visual communication they’re trying to tell,” Wu said. “Like when you have a sales deck, you’re able to add a calculator, you’re able to add a visualizer of what exactly your product does. That’s something where an interactive slide can be worth a thousand pictures.”
One of the most strategically interesting features in Canva Code 2.0 is its HTML import capability, which allows users to take code generated by any AI tool — including ChatGPT, Claude, Lovable, or Bolt — and bring it into Canva as a fully editable design. The implication is unmistakable: Canva is positioning itself as the place where AI-generated code gets its finishing touches, regardless of where it was originally created.
When asked directly whether this amounts to positioning Canva as a “finishing layer on top of vibe coding,” Wu offered a diplomatic but revealing response. “It’s really a continuation of our goal to make all design as easy as possible,” he said. “We’ve supported importing PDFs and translating them into docs, importing PowerPoint files — so in one way, it’s an expansion of that. But in another way, it’s really just listening to what our users want and making Canva both the most useful and the most compatible platform.”
He paused, then added: “It’s not that we’re deliberately positioning ourselves as a specific layer, say like a finishing layer after vibe coding. We just really want to make our platform the most accessible and the most pluggable.”
That language — “most pluggable” — suggests a platform strategy that doesn’t require Canva to win the AI code generation race outright. If Canva becomes the default destination for making AI-generated code look professional and on-brand, it captures value from the entire category regardless of which code generation engine users prefer. The strategy also echoes the broader import capabilities that already allow Canva to ingest PowerPoint decks and PDFs from competing platforms, gradually pulling users deeper into the Canva ecosystem without demanding they abandon existing workflows.
Wu was notably candid about the product’s boundaries — a refreshing departure from the typical Silicon Valley product launch. “Canva Code is great for anything that works as a front-end app, and it’s especially good when you want to leverage data, data submissions, and interactivity at small to medium scale,” he said. “I’ll be honest about the limitations. Canva Code is probably not going to be suitable if you’re trying to build a website with complex backends, or if you’re handling hundreds of thousands of visitors per day.”
This candor effectively draws a line between Canva Code and the more ambitious platforms in the space. While Lovable and Replit are pushing toward full-stack application development — complete with databases, authentication, and production-grade hosting — Canva is deliberately limiting its scope to interactive front-end experiences at modest scale. The question is whether that’s a strategic weakness or a disciplined focus. For the teachers, small business owners, and marketing teams that make up the bulk of Canva’s user base, complex backends and high-traffic scalability are irrelevant concerns. What matters is whether they can create an interactive event page, a property listing website, or a classroom hub that looks professional and works on mobile — without hiring a developer or learning a new tool.
When asked about the AI models powering Canva Code, Wu confirmed the company uses a combination of proprietary and third-party models, including those from OpenAI and Anthropic, but declined to specify the exact mix. “We don’t share the exact mix, and it does change over time,” he said. “We also route differently depending on what you’re asking for and which model family we think is best for handling certain requests.”
Canva’s broader AI infrastructure has been significantly bolstered by an acquisition strategy that has accelerated over the past two years. In March 2024, the company acquired Affinity, the British creative software suite popular with Mac users, in a deal that Bloomberg reported was valued at “several hundred million pounds.” Canva at the time positioned the deal as a way to compete with Adobe’s flagship products — Illustrator, Photoshop, and InDesign — by gaining ownership of Affinity’s Designer, Photo, and Publisher applications.
Just four months later, Canva acquired Leonardo.ai, an Australian generative AI startup with over 19 million registered users and more than a billion images generated. Canva co-founder Cameron Adams said at the time that Leonardo.ai’s technology would be integrated into Canva’s Magic Studio generative AI suite.
Together with these acquisitions, Canva Code is the company’s attempt to layer interactive, code-driven capabilities on top of a visual design platform that has already been enhanced by professional-grade design tools and generative AI models. The company reports over 32 billion uses of its AI products to date — a staggering figure that underscores how deeply AI is now woven into everyday Canva workflows, even for users who may not think of themselves as using artificial intelligence.
Canva’s announcement highlights an impressive traction metric: users have created and published more than six million websites using Canva Code since the feature was first introduced a year ago. But the number deserves scrutiny.
Wu clarified in the interview that the six million figure represents published websites over the past year — meaning sites that were either made public or shared via password-protected or private links. “They may have published publicly, or behind a password, or as a private link. But that’s the number of published websites,” he said.
When asked about active retention — how many of those sites are still live and being maintained — Wu acknowledged the gap in his data. This is a meaningful distinction. In the vibe coding market, raw creation numbers can be misleading because the barrier to generating a site is so low. The more telling metric — which Canva does not yet provide — would be how many of those six million sites receive regular traffic or have been updated after initial publication.
The early use cases, however, suggest genuine utility beyond novelty. Educators and school administrators are using Canva Code to build classroom hubs, with one teacher creating bespoke webpages for each of their classrooms to keep students and parents updated on announcements. Small businesses, like Alt Marketing School, have built mini apps for fundraising training and interactive roadmaps for their members. For World Book Day, 50 readers created educational games across different subjects, complete with pedagogical guides for classroom use.
Canva Code 2.0 is available across all of Canva’s pricing tiers, including its free plan — a notable decision given that competitors like Lovable, Bolt, and Replit reserve their most capable features for paid subscribers. “As you go from, say, free to pro to business to enterprise, you would get more AI credits and be able to have higher usage of Canva Code,” Wu said. “But it is available and it is usable — even free Canva accounts as well as education and not-for-profit accounts.”
This credit-based approach mirrors the pricing evolution happening across the entire vibe coding category, where platforms have converged on token or credit systems that meter AI generation capacity rather than gating features behind subscription tiers. The difference is that Canva’s free tier serves as an acquisition funnel for a much larger design platform, not just for the coding feature itself.
For the institutional customers Canva increasingly courts — school districts, real estate brokerages, enterprise marketing teams — data governance is a threshold concern. Wu addressed this directly. “All users and customers have full control over how their data is used,” he said. “They can choose whether their prompts and data are used for AI training in the settings. For businesses and enterprises, team admins can manage this at the organizational level and guarantee that their inputs, content, and outputs won’t be used for training.” This opt-out approach reflects a lesson the broader industry has learned the hard way. As The Verge reported when Canva acquired Leonardo.ai, Adobe suffered significant backlash over a policy update regarding user data and AI model training — a controversy Canva appears keen to avoid.
When asked where Canva Code fits into the company’s long-term trajectory — and whether Canva is building toward a full-stack app development platform — Wu steered the conversation back to the company’s core audience.
“A huge part of it is reducing the gap between your imagination and what’s possible, especially for everyday users — people who don’t have a lot of time,” he said. “They don’t have time to figure out deploys or MCPs or APIs. They just want to design more interactive and more dynamic communication.”
He pointed to the rapid improvement in AI model capabilities as a key accelerant. “The kind of things you can create today in one shot — like a 3D visualization of a solar system — you really couldn’t have trusted the output a year ago. But today, you have a really high success rate.”
Whether Canva Code becomes a durable product category or a feature that gets absorbed into the platform’s broader AI workflow will depend on how quickly the company can close the gap between its current front-end focus and the full-stack capabilities that increasingly define the competition. Lovable is shipping Supabase-backed apps with authentication and databases built in. Replit’s agents can execute autonomous long-running builds. Bolt.new runs entire Node.js environments in a browser tab. These are fundamentally different ambitions than making a conference landing page look good.
But Canva has never won by matching the technical depth of its competitors. A decade ago, it didn’t try to out-feature Adobe — it made design accessible to the 99 percent of people who would never open Photoshop. Now, in a vibe coding market where every tool can generate a working prototype from a prompt, Canva is making the same wager it made in 2012: that for most people, the hardest part was never the building. It was making it look like it came from you.
1Password on Tuesday launched AI Spend and Consumption Management, a new capability embedded in its SaaS Manager platform that gives IT and finance teams a unified, real-time view of how their organizations consume and spend on AI services from vendors including Anthropic, Cursor, and OpenAI.
The move marks the latest strategic expansion for a company that built its reputation on password management for consumers and, over the past three years, has aggressively repositioned itself as a broader identity security and SaaS governance platform for enterprise buyers. With this release, 1Password is staking a claim in one of enterprise technology’s newest and most chaotic budget categories: the consumption-based cost of large language models.
“Executives want teams to build faster with AI, but that speed is creating a new kind of spending pressure,” Greg Henry, 1Password’s chief financial officer, said in an exclusive interview with VentureBeat. “Developers are consuming tokens at a pace that traditional budgets weren’t built to manage, and IT and finance teams are being asked to forecast and justify AI investments without a clear view of what’s actually driving costs.”
The product, now in public preview with broad availability planned for fall 2026, connects directly to vendor admin APIs to pull token-level consumption data daily. It normalizes that data across providers into a single dashboard and allows organizations to set vendor-level spend limits, configure threshold-based alerts via Slack and email, and break down usage by team, user, vendor, and model.
The core challenge 1Password is targeting is structural. Traditional SaaS pricing operates on a per-seat, per-year model that is easy to budget and reconcile. AI pricing does not. Every API call to Claude, GPT-5.6, or a Cursor-powered coding assistant consumes tokens, and the cost of those tokens varies by model, by input versus output, and by the complexity of the task. A single engineering team running agentic workflows can burn through a prepaid token budget in weeks — and the finance team may not notice until the invoice arrives.
Henry drew a sharp analogy to a problem enterprises have already lived through once. “Consumption-based pricing isn’t new,” he said. “We saw it arrive with cloud infrastructure, and it took years to build the tools and disciplines to manage it. AI is the next version of that shift.”
That comparison resonates across the industry. When Amazon Web Services, Microsoft Azure, and Google Cloud popularized consumption-based pricing for compute and storage in the 2010s, enterprises initially lacked the tooling to monitor and optimize their cloud bills. That gap spawned an entire FinOps ecosystem — companies like CloudHealth, Spot.io, and Apptio built multi-billion-dollar businesses helping organizations understand what they were spending on cloud and why. Henry is explicitly betting that AI token spend will follow the same trajectory, and that organizations that fail to build visibility now will end up, as he put it, “paying far more than they needed to, for far longer than they should have.”
The scale of the coming wave lends credibility to that bet. Goldman Sachs has estimated that token consumption from AI agents alone will grow 24 times by 2030, a projection driven by the expectation that autonomous AI systems will increasingly execute multi-step workflows — booking travel, writing and deploying code, managing customer service interactions — that generate vastly more API calls than a human sitting at a chat interface.
The new capability extends 1Password SaaS Manager‘s existing foundation of application discovery, license management, and spend analytics. It is not a standalone product. Existing SaaS Manager customers can activate it by connecting their supported AI vendor API keys, at which point consumption data flows into a dedicated AI Consumption Management dashboard. Henry confirmed that there is no separate product or add-on fee: “AI Spend and Consumption Management is available to all 1Password SaaS Manager customers.”
The system provides four core functions. First, it aggregates token usage and spend across Anthropic, Cursor, and OpenAI into a single, normalized view — eliminating the need to toggle between three separate vendor dashboards with three different reporting formats. Second, it enables budget controls: organizations can set vendor-level spend limits, configure percentage-based thresholds, and receive automated alerts when prepaid balances approach depletion. Third, it disaggregates consumption by team, user, vendor, and model, allowing finance and IT to understand not just how much is being spent, but where and by whom. Fourth, it situates AI spend within the broader SaaS portfolio, helping organizations see how token costs relate to their total software investment.
Notably, the system captures consumption regardless of whether a human or an AI agent generated it. “Token consumption is captured at the API level regardless of whether a human or an agent is generating it,” Henry explained. “Organizations get the total consumption picture, including the spikes that agent loops can create, which can be some of the hardest usage to catch before it becomes a problem.”
That agent-level visibility matters because autonomous AI systems can generate runaway costs in ways that human users typically cannot. An agentic coding assistant stuck in a retry loop, for example, can consume thousands of dollars in tokens in minutes — with no human in the loop to notice. For now, the product alerts but does not enforce. When asked whether 1Password will eventually give organizations the ability to automatically cut off spending when a threshold is crossed, Henry said the company is “actively evaluating” automatic enforcement but emphasized that visibility must come first: “You can’t enforce what you can’t see.”
The decision to start with Anthropic, Cursor, and OpenAI — rather than casting a wider net — reflects where enterprise AI adoption and budget strain are most concentrated right now. Henry said the choice was driven entirely by customer demand. “Anthropic, Cursor, and OpenAI are where we’re seeing the highest adoption, and where token consumption can move fast and get ahead of the teams responsible for managing it,” he said. The company plans to add additional vendors based on customer demand, API availability, and budget impact, though it has not committed to a specific timeline or vendor list.
The inclusion of Cursor alongside the two major foundation model providers is telling. Cursor, an AI-powered code editor that has rapidly gained traction among developers, represents a category of AI tool where consumption is particularly difficult to forecast. Unlike a chatbot interface where a user consciously types a prompt, Cursor integrates AI suggestions directly into the development workflow, generating token consumption continuously as developers write code. That ambient, always-on consumption pattern makes it especially prone to budget overruns.
Henry also addressed who inside an organization should actually own this problem — and acknowledged that the honest answer right now is no one. “When spend is fragmented across vendor dashboards and finance teams are reconciling it monthly, you’re always behind,” he said. “AI spend can’t be treated as a finance-only or IT-only problem.” He noted that the pricing differences between models have become significant enough that the choice of which AI model a team uses is now a meaningful financial decision, one that is pulling CFOs into conversations with IT, product, and engineering leaders “in ways they never had to before.”
Steve May, director of IT at ServiceTrade, a 1Password customer that has been using the capability, said it addressed a concrete planning gap. “Forecasting tools for AI consumption and spend was one of our biggest gaps in planning because we didn’t have a reliable way to track it,” May said. He added that the visibility has “prevented overages that would have cost far more to fix after the fact.”
1Password is not the only company racing to solve the AI cost management problem, but the competitive landscape is still fragmented and the category is far from mature.
Zylo, a SaaS management platform that Gartner has also recognized as a leader in the space, published its 2026 SaaS Management Index in January showing that AI-native application spend surged 393% year over year in organizations with more than 10,000 employees and 108% overall. Zylo’s data also revealed that ChatGPT has become the most expensed application in enterprise environments, highlighting how AI tools are entering organizations through employee credit cards and expense reports — outside formal procurement and governance workflows. Zylo has added its own token-level cost tracking for AI vendors including Anthropic, OpenAI, Cursor, and Perplexity.
Meanwhile, according to a comparison published by Coommit in May, Vendr — which focuses more on SaaS negotiation than discovery — tracks AI tools at the contract level but does not yet offer consumption-level visibility. And the FinOps Foundation reported in its 2026 State of FinOps survey that 98% of organizations now actively manage AI costs, up from just 31% in 2024. The broader SaaS management market is also consolidating rapidly. In May, Deel acquired Sastrify, a German SaaS management vendor, and began folding it into its HR platform — a signal that SaaS management capabilities are increasingly being absorbed into adjacent enterprise platforms rather than remaining standalone products.
1Password’s approach differs from pure-play SaaS management competitors in one important respect: it is building AI cost management on top of an identity security platform, not a FinOps or procurement tool. The company’s SaaS Manager product grew out of its 2025 acquisition of Trelica, a UK-based SaaS access management startup whose technology enabled the discovery of unsanctioned applications — so-called shadow IT. As BetaKit reported at the time of that deal, 1Password co-CEO Jeff Shiner described Trelica as “a pioneer in modern SaaS access management” and said the acquisition would accelerate 1Password’s Extended Access Management product roadmap by more than a year. CRN noted that Trelica brought more than 300 SaaS integrations to the platform. That identity-first lineage gives 1Password a natural advantage in connecting spend data to specific users and teams — a linkage that matters when the question shifts from “how much are we spending on AI?” to “who is spending it, and is it delivering value?”
The launch raises a question that Henry addressed head-on: whether a company that started as a consumer password manager can credibly compete in enterprise AI cost management.
“It doesn’t feel like a stretch to us. It feels like a natural progression,” he said. “For more than 20 years, 1Password has evolved alongside how our customers work. We started by protecting passwords. Then we helped organizations manage secrets, control access, and get visibility into the applications their teams rely on.”
The company’s evolution has been rapid. 1Password raised a $620 million Series C in January 2022 led by ICONIQ Growth, reaching a $6.8 billion valuation — at the time, the largest funding round ever raised by a Canadian company, according to Crunchbase. The round also attracted celebrity investors including Ryan Reynolds, Scarlett Johansson, and Robert Downey Jr. As of early 2025, BetaKit reported that 1Password had surpassed $250 million in annual recurring revenue, with B2B sales accounting for nearly three-quarters of total revenue and the company claiming to be cash-flow positive.
In May 2024, 1Password launched Extended Access Management, a platform designed to secure sign-ins across both managed and unmanaged applications and devices. That same year, it acquired Kolide for device trust and, in early 2025, Trelica for SaaS discovery. In June 2026, Gartner named 1Password a Leader in its Magic Quadrant for SaaS Management Platforms. According to 1Password’s own blog post on the recognition, its SaaS Manager now supports over 400 integrations and provides visibility into a library of more than 40,000 pre-populated application profiles. Each step has moved the company further from its consumer roots and deeper into enterprise infrastructure. The AI Spend and Consumption Management launch extends that trajectory into financial operations territory — a domain where 1Password will compete not only with SaaS management vendors but potentially with dedicated FinOps platforms and the AI vendors’ own billing dashboards.
Perhaps the most revealing part of Henry’s commentary concerns what organizations should actually do with the consumption data once they have it. He pushed back forcefully against the assumption that high token consumption automatically signals waste.
“A team burning through tokens may be building something genuinely valuable,” he said. “A lower-usage project might not be moving the business forward at all. What matters is whether that consumption is producing enough business value to justify the spend.”
Henry drew a distinction between personal productivity — “having a bot summarize your meeting or draft a quick email” — and genuine business outcomes. “What organizations need to see is where consumption is actually driving revenue, efficiency, or something that moves the needle.”
That framing positions AI Spend and Consumption Management not just as a cost-cutting tool but as a decision-support system for AI investment allocation. If a CFO can see that one engineering team’s heavy Claude usage is powering a product feature that drives revenue, while another team’s OpenAI spend is funding low-value internal automation, the organization can reallocate budget accordingly rather than imposing across-the-board cuts.
“When costs rise faster than expected, the instinct is to cut,” Henry said. “But most organizations can’t yet tell which teams, models, or tools are responsible for the increase, so they end up cutting across the board rather than directing investment toward the AI projects that are actually delivering business value. Blunt cuts on a technology you’re counting on for competitive advantage is not a management strategy, it’s a missed opportunity.”
The product’s current scope — three vendor integrations, alerting but not enforcement — is clearly a starting point. Henry signaled that automatic spend limits are on the roadmap and that additional vendor integrations will follow based on customer demand.
But the broader trajectory he described suggests 1Password sees this launch as a wedge into a much larger opportunity. “As traditional SaaS products add AI capabilities, their pricing models are going to follow,” he said. “Organizations that build visibility and management discipline around consumption now are going to be in a much better position when that happens across the rest of their software portfolio.”
If Henry is right, the chaos currently confined to AI token budgets is not a temporary growing pain but a preview of how all enterprise software will eventually be priced. A decade ago, companies scrambled to understand their cloud bills. Today, they are scrambling to understand their AI bills. The question is whether the organizations building the dashboards this time around can get ahead of the curve — or whether, as Henry warned, they will end up where so many companies ended up with cloud, realizing too late how much they were overpaying, and for how long.
AI Spend and Consumption Management is available now in public preview for 1Password SaaS Manager customers. Broad availability is planned for fall 2026.
Closing the content readiness gap requires a deliberate governance strategy that treats content as infrastructure for AI.
The creators who thrive on social platforms are not the ones generating the most images. They are the ones who know which single image to keep.
As AI moves further into everyday operations, companies are learning that deploying technology is only part of the challenge.
These five questions aren’t just to help you pick tools; they help you avoid costly rework, compliance surprises and growth blockers later on.
As warehouses grow more intelligent and are able to coordinate with other systems and teams, they become value engines.