Upwind is partnering with Cursor Origin to secure every change pushed to the repository, whether a human or an agent wrote it.
Upwind now scans code in Origin. Every pull request and every push to the default branch is checked automatically, with findings delivered as pull request comments, checks, and alerts in the Upwind console.
Code Is Written at Machine Speed
AI coding agents changed how software gets built, and the change landed fast.
Cursor’s own telemetry puts numbers on it: since the first week of January 2026, AI edits per developer have nearly tripled, and median PR size has more than doubled.
Developers, backed by agents, are shipping more changes, and larger ones.
However, human capacity doesn’t scale that way. So teams started adding more agents for later stages of the SDLC, and the pipeline now looks like this: agents write the code, review it, and test it.
The Software Factory
A Software Factory is a centralized workload orbiting a code repository, operated by agents, that takes a ticket to production through a series of agent-driven steps.
Not one agent with a long prompt.
An ecosystem of them, each with a defined job in the delivery process.
The pattern shows up in the usage data. In Cursor’s most engaged cohort, 86.6% started a chat while another agent was already running, against 25.2% in the p50 to p90 band.
Agents increasingly finish the job rather than hand it back: roughly a third of single-turn cloud agent conversations open a pull request, and past twelve turns, more than four in five do.
For a security team, the factory is a new trust boundary.
More code than any team can read, growing in complexity, moving faster than ever, with no human in the loop between the ticket and production.
Origin, Where the Factory Lives
Origin is a git forge built for the agentic era. Repositories, pull requests, code browsing, and agents sit in one surface, with agents operating as first-class actors inside the repository rather than as external clients calling an API.
That makes Origin the natural home of the Software Factory.
Upwind in Origin
Upwind is now integrated with Origin. Every pull request and every push to the default branch is scanned, whoever or whatever opened it, with results delivered inside the pull request.
Security teams have to keep up with the speed of AI. With the Origin partnership, Upwind brings its runtime context into the Software Factories and can detect and review malicious code with effective token economics at AI speed.
How Upwind Secures Software Factory
Connect in seconds. An Origin admin installs the Upwind app from the Upwind console under Components > Integrations > Origin. Upwind discovers the repositories within seconds. No agents to deploy, no pipeline to rewrite, no change to how your developers work.
Supporting the Software Factory agents. Upwind scans every pull request when it is opened, reopened, or updated, and every push to a branch. Nothing depends on a developer remembering to run a scan, and nothing depends on an agent choosing to call a tool. Upwind reads code and writes comments to support the factory testing loop.
Findings where the work happens. Results land in three places: the Upwind console for the security team, inline comments on the pull request, and checks in the PR’s Checks tab. An agent iterating on a PR reads the comment the same way a human reviewer does, and can fix the finding in the same pass.
Agent instructions. Upwind checks can block a merge. Risky agent-written code stops at the gate, and the check tells the agent what to change rather than only telling the security team what went wrong.
The integration is available on the Origin Marketplace.
What This Means for Your Security Team
Return to the number at the top. AI edits per developer nearly tripled and median PR size more than doubled, in under a year, and the curve is not flattening. That volume is exactly what the Software Factory produces.
With Upwind scanning Origin, that volume no longer arrives unreviewed. Every pull request gets the same check, however large it is and whoever or whatever wrote it, and coverage scales with agent output rather than with reviewer headcount.
Get Started Securing Your Software Factory
Software is increasingly built by agents, and the repository is where that work becomes real.
Upwind secures the Software Factory at the speed it ships.
Get a demo or learn more in the Upwind docs.