[AI code review]

Cursor Bugbot and Aevral, at a glance

Cursor Bugbot reviews each pull request and flags likely bugs, code-quality problems, and security issues before they merge.

Bugbot is built to review the change itself: likely bugs, quality problems, and security issues, in the Cursor workflow, before merge. Aevral is built for a different reading of the same change: does this diff widen who has access to what. With Aevral's opt-in PR review, the two reviews sit side by side on the same pull request: Bugbot doing the review it states, and Aevral adding the authorization and business-logic reading.

Cursor Bugbot focuses on

Reviewing each pull request before merge.
Flagging likely bugs, quality problems, and security issues.
Working in the Cursor workflow.

Aevral adds alongside

The access reading of the same diff: authorization, IDOR, and business-logic access control, grounded on the added lines.
With the opt-in add-on: up to two findings per review, posted as a Check plus inline comments. It never blocks a merge.
A finding as a lead with evidence: the author decides with full information.

Run them together

Let Bugbot run its review on every pull request; let Aevral add the authorization and business-logic reading, with the opt-in add-on.

Bugbot and Aevral, in depth; Aevral PR security review.

Also alongside

Scan your whole repo for access bugs.

One GitHub App. A report with evidence. A prompt for the agent you already use.

Join waitlist