The landscape · Software engineering
Software engineering: what AI is really doing
Brief me in 2 minutes
AI in Software engineering.
Coding agents kept moving from suggestion to shipping, and the news since late September is mostly about who owns the pipes. OpenAI used its September DevDay to give Codex cloud environments and a Code Review whose automatic reviews can run in the cloud, SpaceX folded Cursor into a Grok subscription while OpenAI proposed to cut its models off on 12 November, and Cognition closed a round at a $48 billion valuation. The Plugin4Shell bug in four major agents had no fix from two of the four vendors when it was reported, and developers still spend the saved hours reviewing.
The game: we show you 6 things happening. You call each one real now, early or mostly hype. Then the receipts.
Shift 1 of 6
SpaceX owns Cursor and starts rewiring it: one Grok bundle, and OpenAI's models on the way out
Real now
A closed acquisition, and within two months the buyer has changed the pricing and OpenAI has proposed a cutoff date for its models; that is ownership showing up in the product, not a rumor.
How it works. SpaceX completed an all-stock acquisition of Anysphere, the maker of Cursor, on August 14, 2026, converting Cursor's shares into roughly 391 million SpaceX shares and folding it into the SpaceXAI division. Two months in, the owner is changing the plumbing: on October 12 SpaceXAI folded Grok, Cursor and X Premium into one five-tier subscription and moved third-party models in Cursor to per-request API pricing on the new plans, and OpenAI proposed ending its models on Cursor on November 12.
Overstated: A bundled subscription is a pricing event, not a coding breakthrough: SpaceXAI's claim of more coding usage per plan is about its own Grok models, not about better code. And the OpenAI cutoff is smaller than it sounds, since Cursor's CEO says OpenAI models serve about 5% of Cursor user traffic.
Shift 2 of 6
Coding tools stop suggesting and start shipping
Real now
Hundreds of thousands of developers use these agents daily and enterprises pay for it; that is production usage, not a demo.
How it works. Agentic coding tools now take a task, run it in a cloud environment, write the code, run the tests and open a pull request without a person writing each intermediate prompt. OpenAI's Codex now runs tasks in the cloud while the developer's laptop is closed, GitHub's September Copilot-in-VS-Code release added an agent merge mode that handles review feedback, failed checks and merge conflicts, and Factory's Droids run the whole workflow for enterprise teams.
Overstated: 'Autonomous' still means one task at a time under a human's eventual sign-off, and GitHub labels agent merge, automations and scheduled runs as preview features; nobody has an agent running a whole roadmap unsupervised.
Shift 3 of 6
A review layer grows up around the flood of AI-written code
Real now
Two million paid reviews a week for 17,000 customers is production infrastructure; OpenAI's entry is new, so the market is real while its shape is still moving.
How it works. As agents write more code than any human team can read line by line, a separate category of tools reviews it: CodeRabbit and Greptile ingest a whole codebase rather than just a diff and flag security and configuration issues, and are bought by security and platform teams as infrastructure. The agent vendors have noticed: OpenAI's September DevDay added a Code Review whose automatic reviews can run in the cloud, and a Security Cloud whose vulnerability scans can run on a schedule.
Overstated: OpenAI's Code Review and Security Cloud are launch announcements from late September, and we found no adoption figures for them, while CodeRabbit's review counts are reported usage.
Shift 4 of 6
A pinned-commit bypass turns trusted plugin marketplaces into a supply chain backdoor
Real now
The bug is disclosed with working exploits against all four agents, and the reports we found show two vendors without a fix; we found no later report that closes that gap.
How it works. Security researchers at AIR found that Claude Code, Codex, GitHub Copilot and Gemini CLI all check out a plugin's pinned commit without verifying the checkout actually landed there, so an attacker can swap in malicious code while the pin still looks intact and reach into a company's systems through a plugin a team already reviewed and trusted. AIR found the bug in May and disclosed it to all four vendors in June; Anthropic and OpenAI shipped patches, while at the time of the reports Microsoft had not and Google deprecated Gemini CLI instead of fixing it.
Overstated: This is not a theoretical marketplace risk: AIR says it has already demonstrated the technique working at scale, once spreading a malicious plugin to thousands of agents and once finding hundreds of hijacked skills already in active use.
Shift 5 of 6
AI writes half the code now, and review is eating the time it saved
Real now
This is self-reported behavior from developers already shipping AI-written code, with a matched year-over-year comparison, not a lab benchmark.
How it works. BairesDev's Q3 2026 survey of 705 developers found 42% now say AI writes at least half their code, up from 12% a year earlier, and the time developers save coding rose from about 7 hours a week to 13. But 67% say they spend more time reviewing AI output than a year ago and 52% spend more time debugging AI-introduced problems, so the hours saved are being spent elsewhere in the same pipeline.
Overstated: The 13-hours-saved headline hides that those hours did not come back: developers are pouring them into review and debugging instead, so the net time saved for the median team is closer to nothing than the topline number suggests.
Shift 6 of 6
The entry-level rung is being sawed off
Real now
The hiring and posting numbers are already in the record for 2022 through 2026; this already happened, it isn't a forecast.
How it works. Entry-level software engineering job postings and hiring have both dropped sharply since 2022 as agents absorb the routine CRUD and boilerplate work juniors used to cut their teeth on, while senior and specialist roles keep growing. The skill bar for a hireable junior now looks like what used to be expected of a mid-level engineer.
Overstated: 'Juniors are finished' overstates it: overall software engineering postings are still growing and the cut is concentrated in routine roles, not all entry-level engineering.
The scary part
What happens to jobs in Software engineering
What AI is already taking:
- Writing the first draft of most production code at AI-native companies VentureBeat ↗
- First-pass pull request review before a human ever looks at it TechFundingNews ↗
- Routine CRUD and boilerplate work that used to be junior engineers' training ground danilchenko.dev ↗
- End-to-end feature delivery: coding, testing, documentation and deployment Enterprise DNA ↗
What stays human:
Deciding what to build, and verifying an agent's output before it ships, stays human: BairesDev's own Q3 survey found developers spending more time reviewing and debugging AI output than a year ago, not less. Judgment about system design and when to trust an agent doesn't come out of a training run.
Get better · 15 minutes
The ability to read and verify someone else's, or something else's, code fast and catch what's subtly wrong, rather than the ability to write more of it yourself.
Try this this week:
Open Cursor or Claude Code on a real repo, ask it to fix one small bug, then spend the rest of the fifteen minutes doing nothing but reviewing the diff against Veracode's weak categories: injection, XSS, auth, log handling. Write down what you would have merged without checking.
Your move
The IDE and the general-purpose autonomous agent are no longer separate markets you can bootstrap into: SpaceX owns Cursor and is bundling it with Grok, and the model vendors now ship their own cloud agents and code review. The open lane is still the unglamorous layer between them: verification and security review of AI-authored diffs and of the plugins agents pull in, which someone has to gate and which a model vendor will not be neutral about.
Watch what an acquirer does to pricing and supply after the deal: within two months of closing, SpaceX moved Cursor's third-party models to API pricing on the new plans and OpenAI proposed cutting its models off. The red flags are any pitch quoting an annualized run-rate off one good month instead of trailing revenue, and any coding product whose model supplier is also its competitor.
This quarter, check which models your team uses inside Cursor before November 12 and price the API-billed alternative, then run one real pull request through an AI reviewer like CodeRabbit, Greptile or Codex Code Review alongside your normal human review, logging what each caught that the other missed. Also check whether any agent you run pulls in marketplace plugins, and confirm the pinned commit really lands where it says it does.
The valuable skill now is reading and pressure-testing an agent's output against a security checklist, not typing more code. Start this week: take Veracode's failure categories (injection, XSS, auth, log handling) and manually audit one AI-generated pull request against each of them.
What's actually changing
- 1
SpaceX owns Cursor and starts rewiring it: one Grok bundle, and OpenAI's models on the way out
How it works. SpaceX completed an all-stock acquisition of Anysphere, the maker of Cursor, on August 14, 2026, converting Cursor's shares into roughly 391 million SpaceX shares and folding it into the SpaceXAI division. Two months in, the owner is changing the plumbing: on October 12 SpaceXAI folded Grok, Cursor and X Premium into one five-tier subscription and moved third-party models in Cursor to per-request API pricing on the new plans, and OpenAI proposed ending its models on Cursor on November 12.
Why it matters. The category's most valuable coding-agent company now sets its prices and model menu to suit a rocket company's AI division. Teams that picked Cursor for a free choice of models are now choosing between Grok credits and API bills.
What's overstatedA bundled subscription is a pricing event, not a coding breakthrough: SpaceXAI's claim of more coding usage per plan is about its own Grok models, not about better code. And the OpenAI cutoff is smaller than it sounds, since Cursor's CEO says OpenAI models serve about 5% of Cursor user traffic.
SpaceXAnysphere (Cursor)OpenAI
3 receipts
- The deal closed, issuing about 391 million SpaceX Class A shares, making it the largest startup acquisition on record.
the historic deal resulted in the issuance of approximately 391 million SpaceX Class A shares and is widely considered the largest startup acquisition on record
Yahoo Finance, 14 Aug 2026 ↗ - On October 12 SpaceXAI unified Grok, Cursor and X Premium into five tiers, and Cursor's third-party models moved to API pricing.
Third-party models in Cursor shift to per-request API pricing, quietly raising costs for developers even as the listed subscription price drops.
24/7 Wall St., 13 Oct 2026 ↗ - OpenAI proposed a November 12 shutoff of its models on Cursor, and Cursor's CEO put them at about 5% of user traffic.
OpenAI models serve about 5% of Cursor user traffic
CNBC, 29 Aug 2026 ↗
- The deal closed, issuing about 391 million SpaceX Class A shares, making it the largest startup acquisition on record.
- 2
Coding tools stop suggesting and start shipping
How it works. Agentic coding tools now take a task, run it in a cloud environment, write the code, run the tests and open a pull request without a person writing each intermediate prompt. OpenAI's Codex now runs tasks in the cloud while the developer's laptop is closed, GitHub's September Copilot-in-VS-Code release added an agent merge mode that handles review feedback, failed checks and merge conflicts, and Factory's Droids run the whole workflow for enterprise teams. A person is looped in to review the result.
Why it matters. Routine engineering work that used to take a day now takes an agent-run hour, but the human's job shifts from typing to supervising a stream of diffs, which is a different and less-trained skill.
What's overstated'Autonomous' still means one task at a time under a human's eventual sign-off, and GitHub labels agent merge, automations and scheduled runs as preview features; nobody has an agent running a whole roadmap unsupervised.
Factory AIOpenAIGitHub
3 receipts
- Factory's Droids handle the entire dev workflow end to end for enterprise teams.
The company's platform, called Droids, handles the full software development workflow — writing code, running tests, reviewing pull requests, generating documentation, and managing deployment.
Enterprise DNA, 21 Apr 2026 ↗ - OpenAI's Codex cloud environments let a task keep running with the laptop off.
Start a task in the cloud, then follow its progress and steer Codex from your phone or another computer, even with your laptop off.
OpenAI Developer Community, 30 Sept 2026 ↗ - GitHub added an agent merge mode to Copilot in preview.
Enable agent merge in an active session to let the agent handle review feedback, failed checks, merge conflicts, and workflow reruns. This feature is in preview.
GitHub Changelog, 1 Oct 2026 ↗
- Factory's Droids handle the entire dev workflow end to end for enterprise teams.
- 3
A review layer grows up around the flood of AI-written code
How it works. As agents write more code than any human team can read line by line, a separate category of tools reviews it: CodeRabbit and Greptile ingest a whole codebase rather than just a diff and flag security and configuration issues, and are bought by security and platform teams as infrastructure. The agent vendors have noticed: OpenAI's September DevDay added a Code Review whose automatic reviews can run in the cloud, and a Security Cloud whose vulnerability scans can run on a schedule.
Why it matters. The vendor that writes the code now also offers to grade it, which could squeeze the independent reviewers and gives buyers one more reason to ask who checks the checker.
What's overstatedOpenAI's Code Review and Security Cloud are launch announcements from late September, and we found no adoption figures for them, while CodeRabbit's review counts are reported usage.
CodeRabbitGreptileOpenAI
4 receipts
- CodeRabbit runs more than two million code reviews a week for over 17,000 paying customers.
CodeRabbit now runs more than two million code reviews a week for over 17,000 customers
TechFundingNews, 13 Aug 2026 ↗ - OpenAI's DevDay added a Code Review that can run automatic reviews in the cloud.
Code Review brings summaries, diffs, and questions about changes into the review interface. Automatic reviews can run in the cloud.
OpenAI Developer Community, 29 Sept 2026 ↗ - OpenAI's DevDay also added a Codex Security Cloud whose vulnerability scans can run on a schedule.
Codex Security Cloud scans for vulnerabilities, investigates findings, removes duplicates, and prepares fixes. Scans can run on a schedule.
OpenAI Developer Community, 29 Sept 2026 ↗ - Greptile reads and interprets an entire codebase to give context-aware review beyond syntax checking.
an AI-powered tool that automates code review
TechFundingNews, 21 July 2025 ↗
- CodeRabbit runs more than two million code reviews a week for over 17,000 paying customers.
- 4
A pinned-commit bypass turns trusted plugin marketplaces into a supply chain backdoor
How it works. Security researchers at AIR found that Claude Code, Codex, GitHub Copilot and Gemini CLI all check out a plugin's pinned commit without verifying the checkout actually landed there, so an attacker can swap in malicious code while the pin still looks intact and reach into a company's systems through a plugin a team already reviewed and trusted. AIR found the bug in May and disclosed it to all four vendors in June; Anthropic and OpenAI shipped patches, while at the time of the reports Microsoft had not and Google deprecated Gemini CLI instead of fixing it.
Why it matters. Enterprises adopted agent plugin marketplaces on the promise that pinning a commit hash made a reviewed dependency safe; this bug means that promise did not hold for four of the biggest agents at once, and when it was reported two of them, Copilot and Gemini CLI, had no fix.
What's overstatedThis is not a theoretical marketplace risk: AIR says it has already demonstrated the technique working at scale, once spreading a malicious plugin to thousands of agents and once finding hundreds of hijacked skills already in active use.
AIRAnthropicOpenAIGoogleMicrosoft
3 receipts
- Claude Code, Codex, GitHub Copilot and Gemini CLI all share the same zero-click RCE vulnerability, letting an attacker reach a company's systems the way the employee running the agent could.
Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company's systems and data as the employee running the agent
Help Net Security, 18 Sept 2026 ↗ - As of September 2026, Microsoft had not shipped a Copilot patch, despite Copilot's use across nearly all of the Fortune 500.
Almost 90 percent of Fortune 500 companies use Copilot, according to Microsoft, which also happens to be one of the two that didn't ship a patch for the flaw.
The Register, 17 Sept 2026 ↗ - As of September 2026, Google had deprecated Gemini CLI rather than patch it, leaving every existing install exposed.
Google has gone further in the other direction, deprecating Gemini CLI altogether rather than patching it, which means every existing install stays exposed indefinitely.
Help Net Security, 18 Sept 2026 ↗
- Claude Code, Codex, GitHub Copilot and Gemini CLI all share the same zero-click RCE vulnerability, letting an attacker reach a company's systems the way the employee running the agent could.
- 5
AI writes half the code now, and review is eating the time it saved
How it works. BairesDev's Q3 2026 survey of 705 developers found 42% now say AI writes at least half their code, up from 12% a year earlier, and the time developers save coding rose from about 7 hours a week to 13. But 67% say they spend more time reviewing AI output than a year ago and 52% spend more time debugging AI-introduced problems, so the hours saved are being spent elsewhere in the same pipeline.
Why it matters. The 'AI makes you far faster' pitch quietly became 'AI moves the work from writing to reviewing,' which is a real shift in what engineers do all day, but not the clean productivity multiple companies are budgeting for.
What's overstatedThe 13-hours-saved headline hides that those hours did not come back: developers are pouring them into review and debugging instead, so the net time saved for the median team is closer to nothing than the topline number suggests.
BairesDev
3 receipts
- 42% of developers now report AI generating at least half their code, up from 12% a year before, across a 705-developer, 41-CTO survey.
BairesDev's Q3 2026 Dev Barometer — 705 developers across 60+ countries plus 41 enterprise CTOs — found 42% report AI generating at least half their code, up from 12% in Q3 2025.
AI Weekly, 15 Sept 2026 ↗ - Time saved on coding rose from 7 to 13 hours a week, but more than two thirds of developers spend more time reviewing AI output than a year ago.
Time saved on coding jumped from ~7 to 13 hours weekly, but 67% spend more time reviewing AI output and 52% more time debugging AI-introduced problems.
AI Weekly, 15 Sept 2026 ↗ - The survey's author says shipping accountability still sits with one engineer, now for far more AI-written code than before.
In Q3 2025, 12% of developers said AI wrote half their code. Today it's 42%, and the decision to ship it still sits with one engineer, for far more code than it used to.
WebProNews, 15 Sept 2026 ↗
- 42% of developers now report AI generating at least half their code, up from 12% a year before, across a 705-developer, 41-CTO survey.
- 6
The entry-level rung is being sawed off
How it works. Entry-level software engineering job postings and hiring have both dropped sharply since 2022 as agents absorb the routine CRUD and boilerplate work juniors used to cut their teeth on, while senior and specialist roles keep growing. The skill bar for a hireable junior now looks like what used to be expected of a mid-level engineer.
Why it matters. The pipeline that turns juniors into seniors is thinning out at the exact moment the industry needs more people who can supervise and verify agent output, a shortage that shows up five years from now, not now.
What's overstated'Juniors are finished' overstates it: overall software engineering postings are still growing and the cut is concentrated in routine roles, not all entry-level engineering.
2 receipts
- Entry-level software engineering postings dropped 67% between 2022 and 2024, with AI tools handling most of the routine work juniors used to do.
entry-level software engineering postings dropped 67% between 2022 and 2024
danilchenko.dev, 12 Apr 2026 ↗ - AI tools now handle most of the routine coding work that used to be assigned to junior engineers.
AI coding tools reportedly handle 60-80% of this now.
danilchenko.dev, 12 Apr 2026 ↗
- Entry-level software engineering postings dropped 67% between 2022 and 2024, with AI tools handling most of the routine work juniors used to do.
Who's doing it
8 companies to know, 8 with a round we can source. Newest first where dated.
Search these companies in the startup database ↗ · Explore all research tools
Cursor (Anysphere)AI coding IDE / agent
AI-native code editor and agent that writes, edits and ships code inside a developer's existing codebase; acquired outright by SpaceX in 2026 and now run as a subsidiary inside SpaceX's AI division.
Latest · 13 Oct 2026On October 12 SpaceXAI moved Cursor into a single five-tier Grok, Cursor and X Premium subscription and put third-party models on API pricing on the new plans. 24/7 Wall St. ↗
$900M growth round, 5 June 2025 source ↗
Cognition (Devin / Windsurf)autonomous coding agent / AI IDE
Maker of Devin, an autonomous software engineering agent, merged with the Windsurf AI IDE it acquired in 2025 to combine agent and editor into one product.
Latest · 9 Sept 2026Cognition raised $2 billion in a Series E at a $48 billion valuation with run-rate revenue near $900 million. CXO Digitalpulse ↗
$2B Series E, 9 Sept 2026 source ↗
Poolsidefoundation models for coding
Trains foundation models purpose-built for agentic coding, licensed to enterprises and other AI labs rather than sold as its own IDE or agent product.
Latest · 21 Aug 2026Nvidia agreed to pay Poolside $6 billion to license its Model Factory software and hire around 109 of its employees, plus invest $1 billion at a $12 billion valuation, without acquiring the company. PYMNTS ↗
$500M Series B, 14 June 2026 source ↗
CodeRabbitAI code review
AI reviewer that reads full pull requests and codebases to flag bugs, security issues and misconfigurations before merge.
Latest · 13 Aug 2026CodeRabbit runs more than two million code reviews a week for over 17,000 customers, including Nvidia, BMW and Adyen. TechFundingNews ↗
$143M Series C, 13 Aug 2026 source ↗
LovableAI app builder / vibe coding
Prompt-to-app builder that lets non-engineers and startups generate full-stack web apps from a description.
Latest · 12 Aug 2026Lovable hit $500 million in annualized run-rate revenue in June 2026. TechCrunch ↗
$400M Series C, 12 Aug 2026 source ↗
Factory AIenterprise coding agents
Builds 'Droids', a coordinator agent plus specialist sub-agents that write code, run tests, review pull requests, write docs and manage deployment for enterprise engineering teams.
Latest · 21 Apr 2026Hundreds of thousands of developers at companies including Nvidia, Adobe, EY and Adyen use Factory's Droids daily. Enterprise DNA ↗
$150M Series C, 21 Apr 2026 source ↗
ReplitAI app-building agent
Browser-based platform where Agent 3 builds, tests and deploys full applications from natural-language prompts, priced on usage-based agent consumption.
Latest · 11 Mar 2026Replit says it is on track to hit $1 billion in run-rate revenue by the end of 2026. Replit ↗
$400M growth round, 11 Mar 2026 source ↗
GreptileAI code review
Full-codebase-aware AI reviewer that comments on pull requests with context beyond syntax, also used to onboard junior engineers.
Latest · 21 July 2025Greptile automates code review by reading and interpreting an entire codebase rather than just the diff. TechFundingNews ↗
$30M Series A, 21 July 2025 source ↗
Your move
Our read, built on the receipts above.
The IDE and the general-purpose autonomous agent are no longer separate markets you can bootstrap into: SpaceX owns Cursor and is bundling it with Grok, and the model vendors now ship their own cloud agents and code review. The open lane is still the unglamorous layer between them: verification and security review of AI-authored diffs and of the plugins agents pull in, which someone has to gate and which a model vendor will not be neutral about.
Watch what an acquirer does to pricing and supply after the deal: within two months of closing, SpaceX moved Cursor's third-party models to API pricing on the new plans and OpenAI proposed cutting its models off. The red flags are any pitch quoting an annualized run-rate off one good month instead of trailing revenue, and any coding product whose model supplier is also its competitor.
This quarter, check which models your team uses inside Cursor before November 12 and price the API-billed alternative, then run one real pull request through an AI reviewer like CodeRabbit, Greptile or Codex Code Review alongside your normal human review, logging what each caught that the other missed. Also check whether any agent you run pulls in marketplace plugins, and confirm the pinned commit really lands where it says it does.
The valuable skill now is reading and pressure-testing an agent's output against a security checklist, not typing more code. Start this week: take Veracode's failure categories (injection, XSS, auth, log handling) and manually audit one AI-generated pull request against each of them.
What's next
- 12 Nov 2026 OpenAI's proposed November 12 cutoff of its models on Cursor, and whether Cursor and OpenAI settle it first cnbc.com ↗
- Dec 2026 Replit's $1B run-rate revenue target replit.com ↗
- Oct 2026 Whether Microsoft has since shipped a Copilot patch for the pinned-commit flaw reported unpatched in September 2026 theregister.com ↗
Other industries
- FinanceBanks move agentic AI from chatbots to running back-office and dealmaking work
- HealthcareAmbient scribes go from pilot project to clinical infrastructure
- LegalLegal AI vendors go from research assistant to agent that produces the deliverable
- Real estateLeasing AI graduates from answering the phone to acting inside the property system
- Sales and marketingCustomers start sending their own AI agents, and vendors race to build the front door for them
- Jobs, HR and recruitingAI runs the first-round interview, not just the resume filter
- InsuranceClaims move from adjuster-first to AI-first, humans supervise the exceptions
- CybersecurityAttackers hand whole intrusion campaigns to AI agents, at about $50 a breach
- Consulting and accountingAI-written client reports become a recurring, public Big Four embarrassment
- Retail and e-commerceAgent checkout retreats to a cart, and the banks guard the last tap
- EducationNYC and LA ban AI for students, not for teachers
- Media and creativeAI video's money goes to the app that resells the models, not the lab that trains them
- Manufacturing and roboticsHumanoid robots move from demo livestreams to paid warehouse shifts
- Transport and robotaxisRobotaxis go from demo to metered fare, and Waymo starts borrowing to scale
- Energy and data-centre powerGrid rules get rewritten mid-buildout, state by state
- GovernmentGSA turns AI adoption into a government-wide subscription, then swaps 'free' for metered contracts
- Agriculture and foodDriverless tractors learn to run the tools behind them, through open platforms and retrofit kits