Summary
Cursor says Schellman conducted an organisational-controls audit and adversarial testing across thousands of scenarios. The assessment covered secrets protection, secure code generation, MCP security, and agent identity and permissions, with recurring quarterly checks and an annual full audit planned.
Why it matters
The certification offers enterprise buyers a more concrete basis for evaluating coding-agent controls than vendor assurances alone, although certification is not proof that every deployment is safe.
Related coverage
- Cursor officially joins SpaceX
- DeepSeek open-sources a plugin-oriented agent harness
- Autonomous AI attacks raise critical-infrastructure concerns