Rescue by builder · Cursor
Rescue for Cursor apps
Cursor helps you write a lot of code quickly. Our checks look for the gaps that are easy to miss when code arrives fast: missing permission checks, unlimited AI spend and keys in the wrong place.
Common issues we check for in Cursor apps
- AUTH-001 — Admin pages without an access check
- AUTH-009 — Records fetched by ID without checking who owns them
- SEC-005 — AI provider keys used from the browser
- AVL-004 — AI routes with no per-user limit
- DB-009 — SQL built by joining strings
- DEP-001 — Dependencies with known vulnerabilities
- HYG-003 — Tokens or personal data in logs
How we fix them
One small pull request per problem, with a test and rollback steps, reviewed by a Rivyva engineer. You merge.
What you need
Your app's code in a GitHub repository, and its live URL. Your project in a GitHub repository. If you use Cursor rules files, we leave them untouched.
Questions
Can I run your checks locally first?
Yes. Our CLI runs the code checks on your machine and can work offline. See the CLI docs.
Do you use AI on my code?
We use AI only to explain findings and draft fixes for your repo, and only after you agree to it.
Rivyva is independent and not affiliated with or endorsed by Anysphere (Cursor). Cursor is a trademark of its owner.