Cursor launches deploy-monitoring and security-review bots
Cursor has launched two bots for Teams and Enterprise customers — Rollouts, which monitors each change as it deploys, and Security Review, which flags exploitable bugs on every pull request.
Cursor said Tuesday it is launching two bots aimed at what it calls "the last mile of shipping code," both available now on Teams and Enterprise plans and enabled from the dashboard's automations tab.
Rollouts attaches a monitor to every pull request and reports change health per environment as one of three verdicts: verified healthy, regression detected, or inconclusive. Cursor describes it as its version of Firetiger Change Monitors, rebuilt with the company's Bot Development Kit. When a PR opens, the bot reads the diff and posts a monitoring plan as a comment — risks identified, the change's intended effect, signals it will check, and instrumentation gaps — which developers can edit. It then wakes on deploy events for the commit and runs the plan against logs, metrics, and traces, tracking staging and production separately. On a suspected regression it names the change and notifies the author, and can open a revert PR or hand the finding to a cloud agent. It does not merge or roll back on its own. Integrations cover Origin or GitHub, a CD system, and Datadog and other telemetry providers; feature-flag support is listed as coming soon.
Security Review posts a single comment per PR covering exploitable bugs only — injection across SQL, command, and template surfaces, authentication and authorization bypasses, committed secrets, SSRF, unsafe deserialization, and dependency changes with known vulnerabilities — each with a severity, attack path, and proposed fix. Style and quality remain with Bugbot. Draft PRs are skipped.
For 10 days, Cursor is including credits for roughly 50 changes on Teams and 500 on Enterprise. No detection rates or benchmarks were provided.