Cursor Launches Rollouts and Security Reviewer Bots, Built on Its Firetiger Acquisition
Cursor released two automated bots that watch code from pull request to production and scan every PR for security flaws, six weeks after acquiring startup Firetiger.
Overview
Cursor released two new automated bots on September 23, 2026: Rollouts, which tracks a code change from the moment a pull request opens through its behavior in production, and Security Reviewer, which scans every pull request for vulnerabilities, according to Cursor’s own announcement. The release, posted by Rustam Lalkaka, is the first product to ship since Cursor’s acquisition of production-monitoring startup Firetiger, which Lalkaka co-founded.
What We Know
- Cursor introduced the pair as “software development bots that help you get safe, reliable code into production faster,” describing Rollouts as watching “a change from PR to production, flags regressions, and acts to restore a healthy state,” and Security Reviewer as a tool that “finds and fixes security issues in your codebase,” according to Cursor.
- Rollouts connects to a team’s source control, deploy system, and telemetry — naming Datadog, Grafana, and Honeycomb as examples — and, before a change is merged, reads the diff to write a monitoring plan covering the risks it identifies and any gaps in instrumentation, according to Cursor.
- After deployment, Rollouts compares live signals against a pre-deploy baseline and, depending on configuration, responds to a suspected regression by notifying the author, pausing a progressive rollout, or opening a revert pull request for approval, according to Cursor. The company says the bot can catch regressions confined to a single endpoint or region before a global alert would fire, and distinguish an intentional change in behavior from an actual regression.
- Cursor says feature-flag integration and awareness of release trains and deploy freezes are “coming soon” for Rollouts, according to Cursor.
- Security Reviewer reads a changed file in the context of the entire codebase rather than pattern-matching in isolation, checking for injection flaws across SQL, command, template, and LDAP surfaces, broken authentication or authorization on new routes, committed secrets, unsafe deserialization, vulnerable dependency changes, and insecure infrastructure defaults — with each finding assigned a severity, an attack-path explanation, and a one-click fix, according to Cursor.
- Cursor’s own published chart on the announcement states that Security Reviewer “reduced average review time from 4.8 to 3.8 minutes and increased comment acceptance from 45–50% to 60–70%,” according to Cursor.
- Both bots are available immediately on Cursor’s Teams and Enterprise plans, enabled from the product’s automations tab, according to Cursor.
- The release follows Cursor’s acquisition of Firetiger, announced in an August 13, 2026 blog post that described the startup as building agents that “monitor rollouts, catch regressions, investigate incidents, and pass what they find back to coding agents.” Firetiger was founded in 2024 by Rustam Lalkaka and Achille Roussel, who previously worked on production systems at Cloudflare, Twitch, Segment, and Twilio, according to Cursor.
- That same acquisition post previewed a future capability called “Change Monitors, which watch deployed changes and flag problems as they appear,” alongside a separate project called Cursor Origin, according to Cursor.
- Cursor’s Firetiger acquisition was announced the day before SpaceX closed its $60 billion acquisition of Cursor on August 14, 2026, according to The New Stack.
- In a LinkedIn post following the Firetiger deal’s announcement, Lalkaka — described by The New Stack as Firetiger’s co-founder and CEO — wrote that “the cost of creating changes has dropped to near zero,” while “the cost and risk of deploying them has stayed largely the same,” according to The New Stack.
What We Don’t Know
- Cursor has not disclosed pricing specific to Rollouts or Security Reviewer beyond their inclusion in existing Teams and Enterprise plans, nor has it given a firm timeline for the feature-flag integration it describes as “coming soon.”
- Neither company has published independent, third-party benchmark data on the review-time and acceptance-rate figures beyond the chart Cursor published itself.
Analysis
The timing links the release directly to Cursor’s growing ownership under SpaceX: the Firetiger acquisition was announced within a day of that deal closing, and Rollouts arrives roughly six weeks later positioned as the first tangible output of combining Firetiger’s production-monitoring agents with Cursor’s coding-agent platform. Cursor has framed the pairing as part of a broader push toward what it calls “self-driving codebases” — extending its agents’ reach from writing code to watching how that code behaves once it ships.