Company launches software development bots Rollouts and Security Reviewer for safer production code

On September 23, 2026, the company introduced two software development bots, Rollouts and Security Reviewer, designed to help teams ship safe, reliable code to production faster.

Rollouts monitors a change from the moment a pull request opens until it is running confidently in production. It connects to source control, deployment systems, and telemetry platforms such as Datadog, Grafana, and Honeycomb. Before merge, it reads the diff and writes a monitoring plan covering potential risks, expected effects, and places where current instrumentation cannot verify whether the change worked. After deployment, Rollouts compares signals against the pre-deploy baseline. When it detects a regression, it can notify the author, pause a progressive rollout, or prepare a revert PR for approval. The bot is designed to catch regressions isolated to one endpoint in one region, distinguish intended effects from actual regressions, and flag missing instrumentation before merge.

Security Reviewer runs on every pull request and evaluates the change in the context of the entire codebase. It reports vulnerabilities with explanations and proposed fixes, covering injection attacks across SQL, command, template, and LDAP surfaces; missing or broken authentication and authorization on new or changed routes; secrets committed to source; unsafe deserialization; unvalidated redirects; dependency changes that bring in known vulnerabilities; and insecure defaults in infrastructure and config. Each finding includes severity, an attack path, and a one-click fix.

The company reiterated that it is building toward self-driving codebases. Rollouts and Security Reviewer autonomously handle common tasks that software teams wish they had more expertise and time to address. Both bots are available today on Teams and Enterprise plans and can be enabled from the automations tab.