Cursor's security team, built by Travis, created a security bot that triggers upon PR release and has fixed more than 200 vulnerabilities to date, the vast majority of which were fixed automatically.