Cursor’s announcement on X states that Cursor Security Review is now available for Teams and Enterprise plans, with two always-on agents aimed at code review and scanning.
According to Cursor, the first agent, called Security Reviewer, checks every PR for vulnerabilities and leaves comments. The second, Vulnerability Scanner, runs scheduled scans of a codebase and posts findings in Slack.
The company also mentions that the agents can be customized to fit a team’s requirements. Cursor says teams can adjust triggers, add their own instructions, attach custom tooling, and decide how results are shared.
In a follow-up post, Cursor stated that it is still improving the runtime, harness, and models behind Security Review to provide a stronger out-of-the-box experience. It also noted that the security agents draw from an existing usage pool.
Reactions on X were mixed. Some commenters welcomed the idea of an always-on security auditor inside the development flow, while others raised questions about alert fatigue, false positives, privacy, and whether the feature will reach other plans. A few users also compared the launch with Anthropic’s recent security-review push, suggesting the category is moving quickly.
Source: Cursor on X
