Software is distributed on Linux as an AppImage, which has no native sandboxing and should be considered untrusted. Best practice for releases are publishing a PGP public key on a keyserver and offering a signature file created with this keypair alongside each release. This allows user to verify wi…

Sorry for the delay in the response. We’re a lean team and try to prioritize the most important features right now (until we grow a bit more :slightly_smiling_face:) Noted this down as a feature request on our end though.

I’m trying to get my company to adopt Cursor as an alternative to VS Code and GitHub CoPilot. One of the first things my security team noted is that the installs are not signed.🫨 This means we have no assurance that the install has not been tampered with between the time you posted it and the time …

Does your security team has other concerns than this? Such as source code sharing to Cursor / Models to be trained for their purpose, sth like ChatGPT Enterprise provides this: [image]

Yes, and I’ve already pointed out to them these things are covered.

Do you mean that Cursor handles all of these as well?

SOC 2 Certified :white_check_mark: source: footer of cursor.com . (I’ll keep my eye out for any other assurances/certifications etc) related posts: [image] Document Q&A for security & compliance concerns for business use cases Discussion Hey! Thanks for the kind words…

Application Security: consider PGP signed releases

Ideas Feature Requests

ynts October 12, 2023, 10:10pm 2

*typo “considered trusted”

also: bump

Cursor is not code signed on mac?

Topic		Replies	Views
Why cursor app is not properly signed by developoers? Help	1	307	December 9, 2024
Document Q&A for security & compliance concerns for business use cases Feature Requests	6	4155	February 10, 2025
Updating to Cursor 3.7.12 fails (Ubuntu 24.04, AppImage) Bug Reports installation , linux	8	300	July 23, 2026
Extension signature Feature Requests extensions , security , marketplace	0	33	April 20, 2026
Cursor is not code signed on mac? Bug Reports	8	1409	December 11, 2024

Application Security: consider PGP signed releases

Related topics