Cursor Security Review Beta: Always-On PR Security Agents for Teams and Enterprise

Cursor Blog·high signal

Cursor launched Security Review on May 1 with two always-on agent types: Security Reviewer scans every PR for vulnerabilities, auth regressions, prompt injection attacks, and data-handling risks with inline diff comments including severity and remediation, while Vulnerability Scanner runs scheduled codebase scans and posts findings to Slack. Teams can plug in MCP servers for existing SAST, SCA, and secrets scanners to customize the review pipeline.