Skip to main content
ShadowAI Defense GitHub
← All services

Anysphere · Code Assistant

Cursor

Allow Enterprise Enterprise tier: Available DPA: Yes

Network signatures

Domains: cursor.sh, cursor.com

API endpoints: api.cursor.sh, api2.cursor.sh

SNI patterns: *.cursor.sh, *.cursor.com

Client signatures

Process names: Cursor.app (macOS), Cursor.exe (Windows)

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 4
  • Output quality (hallucination / legal): 3
  • Integration risk (OAuth, extensions, agentic): 3

Data egress concerns

  • Source code
  • API keys in editor
  • Internal repository content

Training-use default

Privacy mode (available across tiers) disables training-use and most retention. Business tier defaults to privacy mode.

Applicable detection rules

References