Cursor's Rollouts and Security Review bots are Teams and Enterprise only

Cursor launched two bots on September 23, according to its changelog. Both are available on Teams and Enterprise plans and are enabled from the automations tab.

Rollouts

Rollouts attaches a monitor to each pull request. When the PR opens, it writes a monitoring plan as a PR comment: risks, the intended effect, the signals it will check, and gaps in instrumentation. You can edit the plan. On deploy events it checks logs, metrics, and traces per environment and reports one of three verdicts: verified healthy, regression detected, or inconclusive.

On a regression, it names the suspected change and notifies the author. Depending on configuration, it can open a revert PR for review or hand the finding to a cloud agent. Cursor says Rollouts does not merge or roll back on its own today. It connects to Origin or GitHub, your CD system, and Datadog or other telemetry providers.

Security Review

Security Review posts one comment per pull request reporting exploitable bugs: injection, auth bypasses, committed secrets, SSRF and unvalidated redirects, unsafe deserialization, and vulnerable dependency changes. Each finding has a severity, attack path, and proposed fix. Draft PRs are skipped. Style and quality stay with Bugbot.

What it costs

The changelog does not list a price. It says that for 10 days after launch, Teams customers got credits for roughly 50 changes and Enterprise customers roughly 500. That window has closed.

Should you switch

These are not available on individual plans. If you are on Teams or Enterprise, the cost after the trial credits is the thing to confirm with Cursor before turning Rollouts on across every repository.