Cursor· Cursor

Cursor Security Review

is now in beta on Teams and Enterprise plans. You can run two types of always-on security agents: Security Reviewer and Vulnerability Scanner. Security Reviewer Security Reviewer checks every PR for security vulnerabilities, auth regressions, privacy and data-handling risks, agent tool auto-approvals, and prompt injection attacks. It will leave inline comments at the exact diff location with severity and remediation. <figure><img src="https://ptht05hbb1ssoooe.public.blob.vercel-storage.com/assets/changelog/security-reviewer.png" loading="lazy" alt="Security Reviewer leaving inline comments on a pull request diff." /><figcaption>Security Reviewer leaving inline comments on a pull request diff.</figcaption></figure> Vulnerability Scanner Vulnerability Scanner runs scheduled scans of your codebase to check for known vulnerabilities, outdated dependencies, and configuration issues. You can configure it to send updates of its findings in Slack. …

Announced

30 Apr 2026 00:00 UTC