Cursor Security Review + Vercel Sandbox, Ably, Buildkite, Honeycomb | Devtools SaaS Recap 2026

Cursor ships always-on Security Reviewer, Vercel Sandbox runs Claude Managed Agents, and Ably, Buildkite, Honeycomb rewire devtools for AI agents.

Cursor Security Review brings two always-on agents to Teams and Enterprise: Security Reviewer inspects every PR for auth regressions, data-handling risks, and prompt injection with inline severity comments, while Vulnerability Scanner sweeps the codebase on a schedule and routes findings to Slack — no new dashboard.

Vercel Sandbox is now a supported runtime for Anthropic-hosted Claude Managed Agents. Every session spins up its own Firecracker microVM in milliseconds, secrets stay brokered at the firewall, egress is deny-by-default, and the trust boundary is the same one serving a billion Vercel deploys.

Ably shipped CLI 1.1.0 with ably init — a single command that installs the CLI, runs OAuth, and drops Agent Skills into Claude Code, Cursor, Windsurf, or VS Code. Buildkite added OAuth 2.0 Token Exchange on Enterprise: mint signed JWTs from your IdP and exchange them at /oauth/token for short-lived bktx_ tokens scoped by application, replacing static personal access tokens.

Honeycomb relaunched Canvas as a multiplayer investigation surface where humans and agents share the same incident — SLO burns and anomalies spawn an agent that has already pulled traces, with native skills for Claude Code and a GitHub integration. Cohere released Command A+ as the new flagship replacement for command-a-03-2025, and Kubernetes v1.36 introduces a PodGroup API for gang scheduling AI/ML and batch workloads.

---

Mentioned in this video: • Cursor — Security Reviewer and Vulnerability Scanner beta on Teams and Enterprise • Vercel — Sandbox becomes a runtime for Claude Managed Agents • Ably — CLI 1.1.0 with ably init one-command Agent Skills install • Buildkite — OAuth 2.0 Token Exchange for short-lived bktx_ API tokens • Honeycomb — Canvas relaunch with auto-investigations, multiplayer, skills, GitHub • Cohere — Command A+ flagship model release • Kubernetes — v1.36 PodGroup API for workload-aware gang scheduling

---

More weekly devtools SaaS recaps: https://sparkpulse.io/devtools

Subscribe for weekly devtools product updates.