Cursor, famous for its coding assistant, has released an interesting new feature that expands beyond development into deployment and security. We're talking about the Rollouts and Security Review operational bots, officially launched on September 23rd. They go beyond simple code generation to automate post-deployment monitoring and security checks.

Rollouts is an agent that monitors whether PR code has been successfully deployed to staging or production servers. What's impressive is that it leverages the Model Context Protocol (MCP) to integrate with monitoring tools like Datadog, Grafana, and Honeycomb. It analyzes error logs and metrics in real-time after deployment, sending alerts to Slack or the PR if an issue occurs. While it unfortunately doesn't perform automatic rollbacks yet, it seems quite useful for reducing the effort required for initial deployment monitoring.

Security Review is a security audit agent that scans PRs for critical vulnerabilities like SQL injection, SSRF, and authorization bypasses, typically in just 3.8 minutes. It skips trivial code style complaints and provides a clean report in a single PR comment that includes actual attack paths and remediation steps, keeping the noise level surprisingly low. You can also run it locally within the editor using the /review-security command, which is very convenient.

Here is a simple example of the MCP server configuration Cursor uses for integration with monitoring tools. You can register it in the .cursor/mcp.json file as shown below to test the local integration.

These features are currently available only on Cursor's paid Teams and Enterprise plans. You can enable them in the Automations tab of the dashboard, and they're offering free credits for a 10-day trial to celebrate the launch, so teams collaborating together should definitely give it a try!