cursor.com
A
99 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 94 public pages. Methodology 1.0. Category: Developer tools.
| Identity | 20 of 20 | |
| Assurance | 24 of 25 | |
| Data and AI terms | 16 of 16 | |
| Deployment | 4 of 4 | |
| Agent readiness | 17 of 17 |
Trend and peers iHow the score moved over the last scans, how it compares with other scored companies in the same market category, and what about the last scan means the score may still move. Everything comes from public pages.
| Scanned | Score |
|---|---|
| 2026-11-01 | 99 |
| 2026-11-01 | 99 |
0 since 2026-11-01.
Peers
| Category | This company iThis company's score in the category at its latest graded scan. | Peer median iThe middle score among other listed companies in the same market category, at their latest graded scans under the current methodology. | At or above iThe share of those peers this company scores at or above. |
|---|---|---|---|
| Total | 99 | 84.5 | 100% |
| Identity | 100 | 100 | 100% |
| Assurance | 96 | 96 | 67% |
| Data and AI terms | 100 | 60.5 | 100% |
| Deployment | 100 | 100 | 100% |
| Agent readiness | 100 | 92 | 100% |
Likely to change iWhat about the last scan means the score may still move: checks that could not be read, findings waiting for review, an old scan, an older methodology, or a scan that hit its page limit. These describe the scan, not the company.
- 1 check could not be read at the last scan, so the score may move when it is read.
- 3 findings are waiting for staff review.
Identity
SAML or OIDC single sign-on (10 points) Found
team-wide privacy mode enforcement, custom Chat data retention, and SAML/OIDC SSO.
source
SCIM provisioning (6 points) Found
Roles and permissions (4 points) Found
Enterprise admins can set role permissions, whitelist or blocklist repos, models, and MCP servers, and configure global agent run settings.
source
Assurance
SOC 2 Type 2 (10 points) Found
ISO 27001 (4 points) Found
Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications
source
Trust center (5 points) Found
Contact: https://github.com/getcursor/cursor/security
source
security.txt (2 points) Partly found
Contact: https://github.com/getcursor/cursor/security
source
Public status page (2 points) Found
Privacy policy Security Safety Legal Status
source
Bug bounty or disclosure program (2 points) Found
Data and AI terms
No training on customer data (8 points) Found
ANYSPHERE WILL NOT USE CONTENT TO TRAIN, OR ALLOW ANY THIRD PARTY TO TRAIN, ANY AI MODELS, UNLESS YOU'VE EXPLICITLY AGREED TO THE USE OF CONTENT FOR TRAINING.
source
Retention periods (5 points) Under review
Subprocessor list (5 points) Under review
Data processing agreement (4 points) Found
Deployment
Private deployment (6 points) Under review
Customer-managed keys (4 points) Found
Encrypt Cloud Agent data with your own key when your compliance program requires customer-managed keys.
source
Agent readiness
Official MCP server (6 points) Found
MCP - Model Context Protocol server trust management
source
Controls on AI agent actions (4 points) Found
You can configure network egress controls for users, teams, and saved environments to restrict the domains the agent can access.
sourceEnterprise team admins can lock the network access setting using the Lock Network Access Policy option.
sourceSecrets set with type Runtime Secret are still loaded as environment variables, but their contents are redacted from the agent's tool call results
source
Audit log export (2 points) Found
Periodically review them and stream to SIEM, webhooks, or S3 for authentication and admin events.
source
AI use policy (2 points) Could not check
robots.txt asked us not to read the pages this check needs.
Changelog
- 2026-11-01: First score, 99
Scores older than an hour can be refreshed.