AI code review

Cursor Bugbot and Aevral, at a glance

Cursor Bugbot reviews each pull request and flags likely bugs, code-quality problems, and security issues before they merge.

Bugbot is built to review the change itself: likely bugs, quality problems, and security issues, in the Cursor workflow, before merge. Aevral is built for a security reading of the same change: does this diff widen who has access to what, or carry injection, XSS, SSRF, path traversal, or LLM-integration flaws. With Aevral's PR review, live on install, the two reviews sit side by side on the same pull request: Bugbot doing the review it states, and Aevral adding its security reading.

Cursor Bugbot focuses on

Reviewing each pull request before merge.
Flagging likely bugs, quality problems, and security issues.
Working in the Cursor workflow.

Aevral adds alongside

A security reading of the same diff: access control, business logic, injection, XSS, SSRF, path traversal, and LLM-integration security, grounded on the added lines.
Live on install: up to five findings per review, posted as a Check plus inline comments. It never blocks a merge.
A finding as a lead with evidence: the author decides with full information.

Run them together

Let Bugbot run its review on every pull request; let Aevral add its security reading, live on install.

Bugbot and Aevral, in depth; Aevral PR security review.

Also alongside

Security review, handled.

Install the GitHub App and PR review starts on. Sign in with GitHub to connect it, then press Scan for the repository you already have.

Install the GitHub App Log in Sign up

For professional use. By installing, you confirm you can act for the account or organization that owns it, and you accept the Terms and DPA on its behalf.