Cursor AI Updates: September 24, 2026

1. Rollouts Watches a Pull Request After It Deploys

Cursor. The new Rollouts bot reads a diff, posts a monitoring plan as a PR comment, then tracks the change through each environment separately and returns one of three verdicts: verified healthy, regression detected, or inconclusive. On a regression it can notify the author or open a revert pull request. The three-state output is the interesting part, since it refuses to call a deploy clean when the telemetry does not support either answer. Source

2. Security Review Posts One Comment Per Pull Request

Cursor. Security Review reads every pull request in the context of the surrounding codebase and posts a single review comment listing exploitable bugs, targeting injection, authentication bypass, credential leaks, SSRF, and unsafe deserialization. Both bots are on Teams and Enterprise plans with complimentary usage credits for the first 10 days. Source