Cursor Launches Security Review Beta

2026-05-04 · cursor

Cursor released Security Review in beta for Teams and Enterprise. The feature adds always-on security agents that watch pull requests and codebases for vulnerabilities, risky auth changes, and prompt-injection issues. This is one of Cursor's clearest moves toward baked-in agentic DevSecOps rather than a separate security workflow.

Key Features or Updates

Cursor now offers Security Reviewer and Vulnerability Scanner. One reviews PR diffs inline for security issues, while the other runs scheduled scans for known vulnerabilities, outdated dependencies, and config problems.

Impact on Developers

Teams get automatic security feedback earlier in the development loop, which can reduce review burden and catch regressions before merge. It also fits naturally into orgs already using MCP tools and existing security scanners.

How to use it

Enable Security Review from the Cursor dashboard on Teams or Enterprise. Then tune the triggers, instructions, and outputs so the agents match your code review and alerting workflow.

Read Original Post →