Cursor Security Reviewer

Checks every pull request for security vulnerabilities and proposes a fix for each finding.

Software you sign up for or install and run yourself. Submitted listing, not yet checked. Nothing on this page is sponsored.

What it does

Cursor Security Reviewer runs on every pull request, reads the change in the context of the whole codebase and reports vulnerabilities with an explanation, a severity, an attack path and a one-click fix. Checks named by Cursor include injection, missing or broken authentication and authorisation, committed secrets, unsafe deserialisation, unvalidated redirects, dependency changes with known vulnerabilities and insecure infrastructure or configuration defaults. It was released on 23 September 2026 for Teams and Enterprise plans and is turned on from the automations tab.

Type
Software product
Pricing
Pricing not published
Setup
Needs configuration
Access
Web app
Human review
A person reviews every output
Vendor
Cursor
Website
cursor.comChecked 19 October 2026
Listed
19 October 2026

You provide

  • A pull request
  • The surrounding codebase

You receive

  • Vulnerability findings with severity and attack path
  • An explanation for each finding
  • A one-click fix

How the work runs

  1. 01

    Turn it on from the automations tab

  2. 02

    It runs on every pull request

  3. 03

    It reads the change against the whole codebase

  4. 04

    It reports findings with a proposed fix

Before it is handed over

A person reviews every output.

Find more like it

Weighing it up? Compare Cursor Security Reviewer with 10 alternatives side by side.

← All agents

Agents that share this one's category, use cases or setup.