Help Me Convince My Company to Use Cursor

If you have a thought about even a single question, I’d still appreciate any feedback.

My company is a little weary of using Cursor and I’d like some help to address their concerns. How can I respond to these questions?

  1. Does cursor also prevent connections to my localhost ports like it does to non-whitelisted websites?

  2. Can I safeguard against an engineer accidentally clicking OK to accessing a file that is sensitive? Does the config override the user clicking allow?

  3. Will using our own LLM increase security? Or, is it mainly about costs?

  4. What are best practices for configuring Cursor for a company?

  5. Assuming no security breach and using “Privacy Mode” is our source code ever made available to another company other than Cursor or Cursor’s services? I know it’s NO, but just want to verify.

  6. “Extensions are safe to use” I’d like to use josevseb.google-java-format-for-vs-code. What does “safe” mean for extensions, or particularly this one?

I used Cursor at my previous company and I’m trying to advocate for it at my new company. I really appreciate any feedback you can provide.

Thank you,
– Scott

Anyone? I really want to use this tool! Thank you in advance!