Grok 4.7 Lands in Cursor: VibeBuilder Weekly, Sep 28

TL;DR

1Grok 4.7 is live in Cursor on every paid plan. SpaceXAI says it keeps Grok 4.6's price and speed.

2Cursor added Security Review, a bot that checks each pull request for exploitable bugs. It is limited to Teams and Enterprise plans.

3Bolt's Forge preview, with up to 50x more usage on open models, ends October 14.

Top Story: Grok 4.7 arrives in Cursor

Grok 4.7 launched on September 21 and is available in Cursor, Grok Build, and the xAI API. Cursor describes it as a first-party model built with SpaceXAI for coding and other knowledge work. It uses a larger base than Grok 4.6 and was trained on harder, multi-hour tasks, so Cursor recommends it for long-running agents and large codebases.

Every paid Cursor plan includes it, and it draws from the Cursor Models usage pool you already have. It is available in the EU. A faster variant, Grok 4.7 Fast, is billed at twice the standard token rate and works only in Cursor and Grok Build.

Why it matters for builders: if you vibe code in Cursor, the model picker is where your cost and quality decisions now happen. Nothing forces a switch. If a long agent run stalled on Grok 4.6, rerun that same task on 4.7 and compare. If you are a beginner, leave the picker on Auto and watch your usage before paying for Fast. For business owners, the takeaway is that model upgrades inside a tool you already pay for can arrive without a price change.

Caveat: performance claims at launch come from the vendors. Test it on your own project before you trust it.

Plans and Pricing

1Grok 4.7 Fast costs double. It is billed at twice the standard token rates and is excluded from Grok Build's free tier.

2Bolt Forge went live September 14 as a research preview. Individual Pro plans get up to 50x more usage on open-weight models through October 14. The trade: your build sessions are anonymized and used to train open models with Arcee AI, and anything already used stays in the models if you opt out later.

3Bolt's own benchmark puts Forge at about 91 percent of its top paid model. That is an internal test, so treat it as a rough guide. Bolt advises duplicating a project before trying Forge on serious work, and Forge cannot accept PDF uploads yet.

4Cursor Rollouts trial credits run for 10 days after the September 23 launch, covering roughly 50 changes on Teams and 500 on Enterprise.

Security Watch

1Cursor Security Review posts one comment on each pull request listing exploitable bugs, with severity, attack path, and a proposed fix. It looks for injection, authentication bypasses, committed secrets, and risky dependency changes. Draft pull requests are skipped.

2Cursor Rollouts watches each change after it deploys and reports health per environment: verified healthy, regression detected, or inconclusive. It can open a revert pull request for review but does not merge or roll back on its own.

3For solo builders: both bots are Teams and Enterprise features today. Before you publish an app that takes logins or payments, run the built-in security checks on your platform, such as Lovable's Security Scan in the publish dialog or Replit's Security Agent.

Not Seen This Week

We did not confirm a new Lovable, Replit, or v0 release dated September 21 to 28. If you saw one, share it in the group and we will add it.

Try This Week

1Open Cursor's model picker and rerun one task that stalled before, using Grok 4.7.

2Test Bolt Forge on a duplicate project before the October 14 deadline.

3Run a security scan on any app that handles user accounts or payments before you publish.

Events: Next 30 Days

Oct 5-7: VibeKode, Utrecht, Netherlands

Oct 12: Rocket Launch, a USC Builders Night during LA Tech Week (applications due October 12)

Oct 14: Bolt Forge preview ends

Oct 15: LA Tech Week Vibe Coding Camp, Los Angeles

Oct 19: Build Your Edu Platform with Lovable, Warsaw

Oct 22: Idea to Working MVP with Lovable, Tokyo

Oct 24: Lovable Build Day, Rio de Janeiro

Oct 26-28: Vibe Coding Con, Las Vegas (workshops Oct 26, talks Oct 27-28)

Join the Conversation

VibeBuilder Space is a free community for people building apps with AI tools. Join the Facebook group at facebook.com/groups/1113060757712466 and subscribe to the newsletter on vibebuilder.space so Monday's issue lands in your inbox.

Sources

Cursor, Grok 4.7 help page: cursor.com/help/models-and-usage/grok-4-7

xAI docs, Grok 4.7: docs.x.ai/developers/grok-4-7

Cursor changelog, Rollouts and Security Review (Sep 23): cursor.com/changelog/rollouts-and-security-reviewer

The New Stack, Bolt Forge: thenewstack.io/bolt-forge-training-data

Product Hunt, Bolt Forge: producthunt.com/p/bolt-new/bolt-forge-2

Digg/TestingCatalog, Grok 4.7 launch: digg.com/tech/qge5k5uk

Lovable Community Events: community-events.lovable.app

Vibe Coding Con: sessionize.com/vibe-coding-con

VibeKode Utrecht and Berlin: zplatform.ai/ai-event/vibekode-berlin-2026

LA Tech Week Vibe Coding Camp: allai.events