 | |
| Company type | Private |
|---|---|
| Industry | Sex industry |
| Founded | 2010, Hong Kong |
| Founder | Dan Liu |
| Headquarters | Singapore |
Area served | Worldwide |
| Website | www |
Lovense is a Singapore-based sex tech company specializing in the development of remotely controlled sex toys and pleasure products, as well as accompanying software. [1] [2]
Lovense was founded by Dan Liu in 2010. The company was inspired by teledildonics and long-distance relationships. [3] [4]
In 2013, the first app-based sex toys, Max (male masturbator) and Nora (rabbit vibrator), [5] [6] were launched. [7] [8] In 2014, it integrated app controlling. [2]
In 2016, Lush vibrator was launched with the help of S$100,000 raised on the crowdfunding website IndieGogo, [9] [10] and an oscillating G-spot massager. [11] In the same year, it also partnered up with VirtualRealPorn. [12]
In 2017, Lovense released 5 more devices, Hush, Ambi, Domi, Edge, and Osci. [2] [13] In 2018, it introduced a USB Bluetooth adapter to allow its devices to connect to Windows computers.
In 2019, the company upgraded three of its previous devices and relaunched them as Lush 2, Max 2, and Osci 2. [14] [2] In 2020, it launched Domi 2 and limited edition Mission. [15]
In January 2021, the company announced "digital orgies" feature, where up to 100 participants can join via the Lovense app. [16] In early February 2021, Lovense partnered up with CamSoda to launch a vibrating cock ring, Diamo. The ring was also included in an Elden Ring mod. [17] [18] It also launched its small-sized panty vibrator, Ferri, in the same year. [19] [20]
In late 2021, the company launched its "glans massager", called Gush. The massager is compatible with specific integrated games like WildLife Demo. [21] [22] Apart from Gush, 5 more devices were launched, Edge 2, Lush 3, Diamo, Dolce, and Hyphy. [2] [23]
In early 2022, it partnered with SexLikeReal to launch a compatible male vibrator called Calor. It also launched its Sex Machine. [24] [25]
In 2023, Lovense released 6 new products, Solace, Kraken, Lapis, Vulse, Ridge, and Lovense Webcam. [26] [27]
In mid-2023, the company introduced its "Advanced Lovense ChatGPT Pleasure Companion," which could narrate the customized story and make the toy vibrate along with the erotic or romantic tale. [28] [29]
In February 2024, Lovense unveiled Apple Vision Pro-compatible sex toys, which can enhance users' immersion and interactive experiences with the Vision Pro headset through the Lovense App. [30] [31]
In March 2024, Lovense announced a new clitoral sex toy, Tenera 2. [32] Within this year, the company also upgraded three of the previous devices and relaunched as Mini Sex Machine, [33] Mission 2, [34] and Solace Pro, which uses the new Lovense AI Sync technology to accurately and consistently sync toy movements to every adult video. [35]
In May 2024, the company was awarded nearly $20 million in damages after winning a series of intellectual property lawsuits surrounding its Lush series of interactive vibrators. [36]
In 2024, Lovense trademarked its slogan, "Closing the Distance." [37]
As of 2024, the company has officially released more than 25 devices and software, including Lovense Remote App, Connect App, Cam Extension, and Lovense API. The devices support the Alexa voice assistant. [38] [2] [39] The toys also integrate with cam services, allowing them to react to tips that streamers receive. [40] [17]
Lovense toys integrate with several adult video games, including 3DXChat, [41] [42] [43] [44] WildLife Demo, [45] [46] [47] and Lovense Mirror Life. [48]
In 2021, Lovense conducted a 24-hour Twitter Orgy where participants from across the world could experience the same vibration patterns in real time. [49]
In June 2024, Lovense announced the streaming support integration with OnlyFans and became the only live streaming software on OnlyFans that supports tip-activated toy vibrations. [50] In the same year, it conducted another Twitter Orgy with over 8,500 participants worldwide to enjoy the same vibrating moment together. [51]
In 2016, The Internet of Dongs Project, led by security researcher RenderMan, reported three separate email enumeration and disclosure vulnerabilities, including remote user email enumeration via unprotected API endpoints and email addresses being included in marketplace pattern responses. Lovense implemented remediation measures and became a "trusted partner vendor" with the Internet of Dongs disclosure program. [52]
In 2017, users discovered that the Lovense Android app was recording audio without consent and saving it to users' phones. The company called this a "minor software bug" and released an update to address the issue. [53] [54]
In September 2023, security researcher Krissy reported critical vulnerabilities including account takeover capabilities and an HTTP endpoint (`/api/getUserNameByEmailV2`) that could convert emails to usernames and vice versa. Lovense claimed the issues were fixed and paid a $350 bug bounty, but the researcher later found the vulnerabilities remained active. The HTTP endpoint was eventually patched in early 2025, but the account takeover vulnerability persisted. [55] [56]
In March 2025, security researchers BobDaHacker, Eva, and Rebane independently reported vulnerabilities including a different method for converting usernames to email addresses via XMPP manipulation and the same account takeover flaw, with assistance from The Internet of Dongs Project for responsible disclosure. The researchers were unaware of the 2023 report until Krissy contacted them after their findings were published. Despite Lovense's previous claims of fixes to the 2023 researcher, the company treated the 2025 report as new discoveries and paid $3,000 in bug bounties. Lovense initially stated that complete remediation could require up to 14 months, citing concerns about forcing immediate updates for users of legacy software versions. [57] [58]
Following public disclosure and media coverage on July 28, 2025, both vulnerabilities were fixed within 48 hours on July 30, 2025. The email disclosure vulnerability was resolved by removing email-based JIDs from the XMPP server and transitioning to internal user IDs, while the account takeover vulnerability was fixed by completely removing the vulnerable `/api/connect/genGtoken` endpoint. This rapid remediation contrasted sharply with Lovense's previous timeline estimates and demonstrated that the fixes could have been implemented at any time. [59]
Lovense has been recognized widely in the sex industry and has been reviewed by many critics. [60]