Pattern: IDE Vendors Ship First-Party Security Agents as Standard PR Review Layer
Cursor Blog·high signal
Cursor's Security Review beta (May 1) marks a shift: security scanning is moving from third-party CI plugins to first-party IDE features running as always-on agents that review every PR automatically with inline diff comments. Combined with MCP extensibility for existing SAST tools, this signals security-as-default becoming a competitive differentiator for AI coding editors. Expect Windsurf and others to follow within months.