Agent tools grow up under pressure

Cursor’s product week was not just about model access. On 12 Sep, it introduced Projects, a feature for larger tasks such as features and full applications, with longer-lived context and delegation to multiple subagents. On 4 Sep, Vercel added support for Cursor Cloud Agents in Vercel Sandbox, using scale-to-zero workers and isolated microVMs. Cloudflare support for Cursor Cloud Agents was also reported in an article published on 4 Sep, and on 11 Sep Cursor’s MCP Server was announced as powered by ZoomInfo for go-to-market context.

That is the direction of travel: agents are moving from the editor into governed execution environments, context layers and partner infrastructure. GitHub pushed the same theme from the incumbent side. On 6 Sep and 7 Sep, GitHub announced GPT-6 Astra generally available in Copilot, a privacy-safe star history API endpoint, and Copilot updates including the ability to run several agents at once. On 11 Sep, it launched AI Scan for pull request APIs in public preview, expanded trial availability for GitHub Advanced Security, added automatic Dependabot access to GitHub-hosted registries, and announced an enterprise-managed sandbox for Copilot in JetBrains.

The market is no longer asking only who has the cleverest coding agent. The observed moves this fortnight show a sharper question: whose agent can run inside the customer’s workflow, security boundary and commercial stack.

The most revealing sequence came from Replit. On 8 Sep, several website call-to-action buttons disappeared, including Try Free Mode, Start for free, Join Replit Core, Join Replit Pro and Contact sales. On 9 Sep, Replit added commercial and enterprise agreement pages and a Meta partnership page. On 13 Sep, it removed the Starter tier, added up to 30 hours of chat on Free Mode and up to 60 projects on Free Mode to Core, added more free agent usage and Plan mode, removed the Made with Replit badge from Core, and added more Free Mode usage to Pro.

Lovable moved on 10 Sep, adding grants for building and hosting with Cloud to Pro, removing volume-based credit pricing from Pro and Business, and changing Enterprise from Contact us to Custom. Vercel moved the same day, introducing password protection at $20 per month per protected project on Pro, with Enterprise access at team level, while making Vercel Authentication available to protect production domains for free on every plan.

There was a broader merchandising reset underneath those price moves. On 6 Sep and 8 Sep, Cursor added and removed more than one hundred product pages in each sweep. On 10 Sep, Lovable added 30 product pages and removed 15 product pages, alongside blog, careers, customer and docs removals. On 11 Sep, Vercel added 41 product pages and removed 40 blog pages. The visible pricing table was only the last page to change. The positioning work had already started.

GitHub spent the fortnight putting customer proof in front of buyers. On 4 Sep, its customer page added Jibo, Arduino and Trustpilot logos. On 5 Sep, Ahold Delhaize was added. On 8 Sep, Adobe and American Airlines appeared, with new case studies for Accenture’s use of GitHub Copilot with 12,000 developers, Adobe’s integration of GitHub across technology services, and American Airlines’ use of GitHub. On 11 Sep, GitHub added Pinterest, DAZN and Meta logos, plus case studies for Pinterest, SPH Media, DAZN, Meta and Front.

Replit also moved upmarket in public. On 9 Sep and again on 14 Sep, multiple reports said it had opened its first international office in London. On 9 Sep, reports also said Accenture had invested in Replit to support AI-driven software development for enterprises. On 14 Sep, Replit added blog pages related to Databricks and product pages for partnerships with Etisalat, Salesforce and Slack.

Vercel’s hiring points in the same direction. On 14 Sep, it listed Senior Partner Programs Manager and Strategic Partnerships Lead roles across San Francisco, New York City and Austin. Lovable added its own distribution signals: on 9 Sep its Slack App Marketplace listing went live, and on 14 Sep its customer page added O3 World plus a case study about replacing a $35K-a-year SaaS product with an app built in-house.

The fortnight also produced a visible incident trail. On 5 Sep, GitHub reported a major disruption with Copilot Code Review lasting about 108 minutes and a minor repos contents API degradation lasting about 21 minutes. On 8 Sep, two CVEs directly referenced GitHub, including one involving the GitHub CLI affecting versions 2.28.0 through 2.97.0. On 13 Sep, a CVE published on 1 Sep detailed a high-severity SSRF vulnerability in GitHub Enterprise Server with a CVSS score of 7.4.

Cursor had several service events. On 4 Sep, it reported five incidents, including a critical service degradation lasting about 206 minutes. On 8 Sep, it reported a major incident where Grok Bot computers were unreachable for some users for about 65 minutes, plus a minor service degradation affecting CLI, Cloud Agents and IDE. On 13 Sep, Cursor reported two minor service degradations, including one affecting Review Agents and Cloud Agents, both resolved in under 30 minutes.

Lovable reported a partial editor outage lasting about 27 minutes on 7 Sep, alongside Supabase project creation failures lasting about 231 minutes. On 14 Sep, it reported a major Windows Desktop App crash lasting about 76 minutes and a minor map and location search issue in some published projects lasting about 205 minutes. Vercel reported an elevated error rate affecting Connect and Passport on 10 Sep, resolved by 19:16 UTC. None of this stops the category. It does make operational maturity part of the sales narrative.

Cursor’s strategic context changed sharply. On 5 Sep, reports said SpaceX had completed its acquisition of Cursor in a deal valued at $60bn, with OpenAI cutting off access to its models. Further reports on 6 Sep, 7 Sep and 8 Sep repeated that OpenAI had ended or planned to end a major Cursor relationship following the SpaceX deal. On 4 Sep, reporting said the termination of the contract was expected to take effect in November 2026.

Lovable also drew capital attention. On 6 Sep and 7 Sep, multiple reports said it had raised $400m, with one report saying the round doubled its valuation. On 13 Sep, Cognition announced a $2bn funding round at a $48bn valuation, positioning it as a strong competitor to Cursor in the observed coverage.

The category is therefore being pulled in two directions at once. Product teams are shipping agents, sandboxes, APIs and enterprise security features. At the same time, model access, ownership, capital and platform partnerships are becoming first-order competitive variables.