SpaceXAI launched Grok Bot in early beta on August 11, 2026 — a product that sits somewhere between a chatbot and a full-time employee. Each Bot gets its own cloud-hosted virtual machine (browser, filesystem, terminal included), runs 24/7 whether your laptop is open or not, and signs into your tools the same way a human would. No clean API required.

The timing makes sense. SpaceXAI is the combined entity following the reported $60 billion all-stock acquisition of Anysphere (Cursor’s parent), and Grok Bot is one of the first joint products to ship under that umbrella. The VMs themselves appear to be Cursor’s existing cloud infrastructure — developer Wes Bos noted they’re the same remote computers Cursor was already running, which come with Chrome and a terminal and are “pretty permissive.”

What it actually does

The core pitch: you show a Bot a workflow once, it saves it as a repeatable routine, learns your preferences and writing style, and runs it on a schedule or trigger. Multiple Bots can message each other, hand off tasks, and coordinate in group threads — so you could have a manager Bot delegating to specialists without you in the loop.

SpaceXAI says teams are already using it internally for overnight sales pipeline research, expense processing, and CRM updates. The use cases that keep coming up from early testers: vendor negotiation in your voice, customer support, outbound sales drafting, and inbox management.

One tester who spent a week with it described the onboarding approach that seems to work best: dump everything about yourself and your workflows into Grok first, then ask what it can do to improve them. The recommendations system apparently spins up relevant tasks and routines from that context.

The QA agent test

One hands-on test put Grok Bot’s AI QA engineer agent against a real GitHub-connected web app on Vercel. Results were mixed in an instructive way. The agent automatically caught 404 errors and infrastructure issues, confirmed fixes after a redeploy, and returned screenshots. It also has a mobile app for remote management, which is genuinely useful.

But it didn’t validate application logic, search criteria, or core business functionality. The verdict: good as a zero-configuration smoke test before a deploy, not a replacement for real QA automation. “A helpful intern” is probably the right mental model — useful, but you still need to define what done looks like.

Availability and pricing

Beta access is currently restricted to:

SuperGrok Heavy subscribers (included)
Cursor Ultra — $200/month (includes own VM, tool sign-in, scheduled routines, desktop and mobile)
Cursor Teams Premium — $120/seat/month (adds team billing, shared analytics, SAML/OIDC SSO, marketplace)

Platforms: macOS, Windows, Linux, iOS. Android is listed as coming soon. Enterprise access is waitlisted.

The security question nobody has answered yet

This is the part worth sitting with. Grok Bot asks you to hand over login credentials to your company tools — email, CRM, Salesforce, Zendesk, whatever — and trust a remote computer to operate them unsupervised overnight. That’s a different category of risk than a chatbot that reads documents.

It’s not hypothetical either. Cursor’s Grok Build tool was previously found uploading entire Git repositories including committed secrets. That incident hasn’t been forgotten by people evaluating whether to hand an agent their Salesforce login.

Peter Yang, who tested the product, framed the adoption challenge clearly: how do you get regular users to trust sharing credentials with a remote computer, and how do you reassure them that computer is actually secure and isolated? Those aren’t questions Grok Bot has publicly answered yet.

Where this fits

Grok Bot is competing directly with agent products from OpenAI, Anthropic, Google, and Microsoft — but it has one real differentiator right now: mobile. Neither OpenAI nor Anthropic have a clean story for running agents from a phone. If Grok Bot’s iOS app holds up, that’s a meaningful gap to exploit.

The broader shift here is real regardless of how this specific product plays out. Cursor was already running cloud agents for developers. Moving that infrastructure toward general business workflows — sales, ops, support — is a natural next step. Whether enterprises will actually hand over their credentials to make it work is the open question.

Cursor launches Grok Bot in early beta