LoginSign Up
← Back to all sparks
C

Cursor

INFRA · APIS
Velocity8.8

Stacking platform plays — SDK, security agents, fleet environments — in a single sprint.

ai-codingcloud-agentsagent-platformsecurity-reviewdeveloper-sdkenterprise-governance
◆Current state
Cursor is firing on multiple platform-expansion fronts at once. In the past month it has shipped: a programmable SDK that exposes its agent runtime to third-party developers, a Security Review surface with always-on PR security and vulnerability-scanning agents, configurable multi-repo development environments for cloud agents, and admin-side controls (model gating, soft spend limits, granular usage analytics). The cadence is weekly; the substance is platform-grade rather than feature-grade.
◆Where it's heading
Cursor is migrating from "AI-native IDE" to "platform for AI engineering at organizational scale." The SDK turns it into infrastructure for other builders, Security Review creates a recurring always-on agent surface inside customer codebases, and multi-repo environments make fleets of parallel agents actually plausible in real engineering setups. Each release lowers the marginal cost of running many agents against one company's code.
◆Prediction
Expect a bundled "agent fleet" tier for enterprise — environments, security agents, SDK access, model governance, and seat-level analytics priced together — within a quarter. Watch for tighter hooks into CI and observability so the output of these agent fleets becomes auditable and measurable, not just shippable.

◆Recent moves

  1. 8d ago

    # Multi-repo environments

    ⚡ SPARK

    Multi-repo environments, Dockerfile-based environment-as-code with build secrets and layer caching, agent-led environment setup, and per-environment governance with audit logs. This release turns Cursor's cloud agents from one-off runners into deployable fleets that can actually mirror a working developer's machine.

    View source ↗
  2. 8d ago

    # Full-screen tabs

    View source ↗
  3. 14d ago

    # PR review

    A new in-IDE PR review experience with inline threads and a Changes tab, parallel execution of plans via async subagents, a built-in workflow to split changes into PRs, and pinnable skill quick-actions. Solid PR-review and multitasking ergonomics; not a category shift but tightens the IDE-to-merge loop Cursor 3 has been building.

    View source ↗
  4. 17d ago

    # Model access controls

    Enterprise-admin features: model and provider allow/blocklists with default-block on new providers, soft spend limits with usage alerts at 50/80/100%, and per-surface usage analytics. Necessary plumbing for organizations rolling Cursor out at scale — pairs with the multi-repo environments and Security Reviewer work as the enterprise control plane.

    View source ↗
  5. 21d ago

    #Security Reviewer

    Duplicate publication of the Security Reviewer announcement from a different changelog URL, with identical content. No additional product change.

    View source ↗
  6. 21d ago

    # Security Reviewer

    ⚡ SPARK

    Cursor Security Review enters beta on Teams and Enterprise plans, introducing two always-on agents: a Security Reviewer that comments inline on every PR (auth regressions, prompt injection, data-handling risks) and a Vulnerability Scanner that runs scheduled scans with Slack reporting. Both are customizable via instructions, triggers, and MCP-connected SAST/SCA tools.

    View source ↗