Book a free call →

Vibe coding for CIOs: the shadow IT problem is now an executive problem, and also your best opportunity in years.

Every CIO has managed shadow IT: the department that bought its own tool, the spreadsheet that became a system. Vibe coding is shadow IT with a compiler. Directors and VPs across the company are now building working applications with Claude Code and OpenCode, connecting them to real data, and running them on personal hosting accounts.

Book a free callSee what breaks
ROUND 01 — The CIO seat

Why a CIO’s build is different.

It is also the biggest chance the IT function has had in a decade. The backlog of small, valuable internal applications that never justified a project can now be built in days. A CIO who vibe codes, and who sets the guardrails for others who do, turns a governance headache into a delivery engine.

This page is about vibe coding from the information seat: what CIOs build, what breaks when the whole company is building, and how to set rules that hold.

ROUND 02 — What you build

What CIOs build first.

  • 01The internal application the backlog never reached

    Asset tracking, access requests, onboarding checklists, vendor reviews. The applications that were always too small to fund and too useful to ignore.

  • 02The integration layer

    The connectors between the ERP, the HR system, the ticketing tool and the identity provider that used to require a consultant. Built in-house, documented, owned.

  • 03The governance dashboard

    What applications exist, who owns them, what data they touch, when they were last reviewed. Including the ones the business built without asking.

  • 04The template other departments start from

    A starting point with login, permissions, logging and hosting already correct, so when a department builds its own tool it starts from something safe.

ROUND 03 — What breaks

Where it goes wrong for a CIO.

  • The company data is in forty personal accounts

    Every department app is connected to a real system with a real key, hosted on someone's personal account, with no offboarding. When they leave, the app stays, and so does the access.

  • Identity is reinvented badly, everywhere

    Each app has its own login instead of the company's single sign-on. Passwords are reused, admins are whoever built it, and nobody can revoke anything centrally.

  • Nobody knows what exists

    There is no inventory. The first time IT hears about the application is when it breaks, when it is audited, or when a vendor asks who authorised the integration.

  • The guardrails are a policy document

    A rule that says 'do not build without approval' is ignored, because building is faster than approval. Guardrails that work are templates and platforms, not memos.

The full catalogue of what breaks →

ROUND 04 — With a CTO in your corner

What changes.

A CTO in your corner helps you build the rules as software: a template with single sign-on, secret storage, logging and hosting already correct, so the departmental builder starts safe. And a CTO in chat for the moments when someone's tool touches something it should not. You keep the speed the business has discovered. You get the control back.

How a month in the corner works →

ROUND 05 — By industry

Vibe coding for CIOs, by industry.

The rules change with the data. Pick the industry you build in.

ROUND 06 — Questions

What CIOs ask.

ROUND 07 — Other seats

Not a CIO?

Talk to a CTO before your next build ships.

Thirty minutes, free, no card. What you built, what is going on with it, whether we can help.

Book a free callSee the price

In your corner.