Cursor Releases Rollouts and Security Review Bots to Check Code After Deployment

At a glance

Cursor has released two bots that help with the final step of deploying code. Rollouts checks whether deployed changes work properly in each environment, and Security Review finds security flaws that could be exploited in every pull request (a proposed code change). Both bots are available right away on the Teams and Enterprise plans.

Key points

1. 1

   Rollouts posts a verification plan as a comment on each change, then checks logs and metrics after deployment and reports whether the change is normal, a regression, or still under review.

2. 2

   It checks each environment separately, so a change that looks fine in staging may still be flagged as a problem in production.

3. 3

   Security Review looks for injection attacks such as SQL injection, authentication bypasses, and exposed passwords, and reports the severity, the attack path, and a suggested fix.

4. 4

   Teams can also enforce their own coding rules by checking every pull request.

Why it matters

The more often a company deploys code, the greater the risk of outages and security holes. Because this tool automatically finds these problems right after deployment, it matters to development teams.