Cursor’s Rollouts and Security Reviewer announcement. Image: Cursor
Cursor wants its AI to stick around after your code ships. The AI coding company has launched Rollouts, an agent that watches new code as it goes live and can pause the release or open a revert if something breaks, alongside a faster, more accurate version of its Security Reviewer, which checks every pull request for vulnerabilities before it’s merged.
Both are available now to Cursor’s Teams and Enterprise customers, the company, which has been owned by Elon Musk’s SpaceX since August, said on its blog and announced on X on Wednesday.
What Rollouts does
Most AI coding tools stop once the code is written. Rollouts covers what happens next, in two stages:
- Before merge: it reads the code change and writes a monitoring plan, listing the risks, the effects the change should have, and any gaps in the logging or metrics needed to spot a problem.
- After deploy: it compares live signals against how the system looked before the release, pulling data from monitoring tools including Datadog, Grafana and Honeycomb.
If it spots a regression, Rollouts can ping the developer who wrote the change, pause a progressive rollout, or open a pull request to revert it, depending on how a team has set it up. Cursor says integration with feature flags is coming soon, along with awareness of release trains and deploy freezes.
A faster Security Reviewer
Cursor’s Security Reviewer analyses how data flows through the whole codebase on every pull request, not just the lines that changed. It looks for problems including:
- SQL, command, template and LDAP injection
- gaps in authentication and authorisation
- passwords and keys accidentally committed to code
- unsafe deserialisation and unvalidated redirects
- dependencies with known vulnerabilities and insecure infrastructure defaults
Each finding comes with a severity rating, an explanation of how an attacker could exploit it, and a one-click fix. Cursor says reviews now take 3.8 minutes on average, down from 4.8, about 21% faster, and that developers now accept 60–70% of its comments, up from 45–50%.
Who can use it
Rollouts and Security Reviewer are available on Cursor’s Teams and Enterprise plans, set up from the automations tab. Cursor is including usage credits for Rollouts for the next 10 days so teams can try it out.
That left some solo developers unhappy. Replies to Cursor’s announcement asked why individual subscribers were left out, and Cursor hasn’t said whether the features will come to its individual plans.
Why it matters
AI is now writing a big share of the world’s code, and the bottleneck is shifting to checking it and shipping it safely. By watching releases and being able to pull the plug on its own, Rollouts pushes Cursor further into work usually done by site reliability engineers and on-call staff, not just programmers. It’s part of a wider move to agents that do more than one job: Cursor already powers sign-in for SpaceXAI’s Grok Bot agent. The risk is obvious too: an AI that can roll back production code needs to be right, and teams will want to keep a close eye on what it decides.
Sources: Cursor, Cursor on X
Related
