1 min lesson
Shadow AI: the security-led wedge
Explain the practical point behind "The most powerful competitive frame isn't against another vendor."
Step 1 of 3
The most powerful competitive frame isn't against another vendor. It's against the ungoverned status quo. In most enterprises, engineers are already pasting proprietary code into consumer chatbots and unsanctioned tools. That's shadow AI, a live data-exfiltration and IP risk the security team is already losing sleep over.
Reframe the deal. You're not adding a tool to the budget. You're replacing uncontrolled AI usage with governed AI usage. That moves the buying center from "developer productivity," a nice-to-have, to "security and compliance," a must-fix. It hands the CISOChief Information Security Officer. The executive who owns security; usually the hardest and most important person to win over. Press Enter for the full definition. a reason to champion you.
Learn more
Advanced table
The wedge: same activity, but observable, bounded and compliant
- Shadow AI today
- Code pasted into consumer chatbots; no record
- Governed Cursor
- Audit logs + AI-code tracking; you can see what was generated and where
- Shadow AI today
- No control over which models see your code
- Governed Cursor
- Model + MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. Press Enter for the full definition. + repo allowlists; security defines the boundary
- Shadow AI today
- Data may train third-party models
- Governed Cursor
- Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. + ZDRZero Data Retention. A contractual guarantee that the model provider won't store your code or train on it. Press Enter for the full definition. (note: ZDR not available when using your own API keys)
- Shadow AI today
- Traffic over the public internet
- Governed Cursor
- PrivateLinkAn AWS connection Cursor uses for private Git provider and repository-origin traffic; it does not cover model-provider traffic. Press Enter for the full definition. + Cloudflare Tunnel for private connectivity
- Shadow AI today
- No identity or access governance
- Governed Cursor
- SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition./SAMLSecurity Assertion Markup Language. The XML-era enterprise standard that powers single sign-on: your identity provider vouches for you to each app. Older than OIDC but still what many enterprise tools speak. Press Enter for the full definition./OIDCOpenID Connect. The modern single sign-on standard, built as an identity layer on top of OAuth 2.0. Where SAML is XML and enterprise-legacy, OIDC is JSON and what newer tools implement first. Press Enter for the full definition., SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition. provisioning, RBACRole-Based Access Control. Granting permissions by role rather than configuring each person individually. Press Enter for the full definition., terminal sandboxing, hooks
| Shadow AI today | Governed Cursor |
|---|---|
| Code pasted into consumer chatbots; no record | Audit logs + AI-code tracking; you can see what was generated and where |
| No control over which models see your code | Model + MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. Press Enter for the full definition. + repo allowlists; security defines the boundary |
| Data may train third-party models | Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. + ZDRZero Data Retention. A contractual guarantee that the model provider won't store your code or train on it. Press Enter for the full definition. (note: ZDR not available when using your own API keys) |
| Traffic over the public internet | PrivateLinkAn AWS connection Cursor uses for private Git provider and repository-origin traffic; it does not cover model-provider traffic. Press Enter for the full definition. + Cloudflare Tunnel for private connectivity |
| No identity or access governance | SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition./SAMLSecurity Assertion Markup Language. The XML-era enterprise standard that powers single sign-on: your identity provider vouches for you to each app. Older than OIDC but still what many enterprise tools speak. Press Enter for the full definition./OIDCOpenID Connect. The modern single sign-on standard, built as an identity layer on top of OAuth 2.0. Where SAML is XML and enterprise-legacy, OIDC is JSON and what newer tools implement first. Press Enter for the full definition., SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition. provisioning, RBACRole-Based Access Control. Granting permissions by role rather than configuring each person individually. Press Enter for the full definition., terminal sandboxing, hooks |
The wedge: same activity, but observable, bounded and compliant.
Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.
Same developer activity, ungoverned vs governed. The deal isn't a new tool. It replaces the AI risk the enterprise can't see today.
Cursor's enterprise posture: SOC 2 Type II, AES-256 at rest, TLS 1.2+ in transit, annual third-party penetration test. Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. + ZDRZero Data Retention. A contractual guarantee that the model provider won't store your code or train on it. Press Enter for the full definition. is available, with one exclusion: ZDR does NOT apply when you bring your own API keys. State this precisely. Over-claiming on compliance destroys trust with a security buyer.
"Your engineers are already using AI. The only open question is whether you can see it, bound it and prove it to an auditor. We don't introduce that risk. We replace the version of it you can't control today."
Learn more
Optional practice