Skip to lesson
Exit
Demo, objections & the interview loop1 / 2

1 min lesson

Handle seven common objections

Use the four-step response to handle one objection.

Step 1 of 2

Treat an objection as a request for evidence. Start by acknowledging what is true. Then clarify the risk, answer it with evidence and name who owns the relevant control. This keeps the discussion focused on the decision the buyer must make.

A four-step response

Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.

diagram: objection-concede-spine

Acknowledge what is true → Clarify the real question → Give evidence → Name the control and its owner.

Learn more

Full explanation

Seven objections and direct answers

Seven objections and direct answers

1. Security / IP risk

Concede. "Treating source code as sensitive is the right default."

Counter. Use Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. and ZDRZero Data Retention. A contractual guarantee that the model provider won't store your code or train on it. Press Enter for the full definition. terms, SOC 2 Type II, AES-256 at rest, TLS 1.2+, PrivateLinkAn AWS connection Cursor uses for private Git provider and repository-origin traffic; it does not cover model-provider traffic. Press Enter for the full definition. or Cloudflare Tunnel, SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition., SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition., RBACRole-Based Access Control. Granting permissions by role rather than configuring each person individually. Press Enter for the full definition., model and repository allowlists, and audit logs.

Name it. "Your security team owns this data-handling control plane." ZDRZero Data Retention. A contractual guarantee that the model provider won't store your code or train on it. Press Enter for the full definition. does not apply when you use your own API keys.

2. "Copilot is basically free"

Concede. "Bundled pricing is real and hard to argue with on a spreadsheet."

Counter. Cursor adds Plans, Project RulesVersion-controlled instructions in the repo that every Cursor agent interaction inherits, so standards are encoded once. Press Enter for the full definition., BugbotCursor's automated PR reviewer that posts inline findings and can push fix commits from isolated VMs. Press Enter for the full definition., Cloud AgentsAgents that run in a Cursor-managed virtual machine, check out the repo, do the work and open a pull request, then shut down, with no load on your laptop. Press Enter for the full definition. and audit logs around the agent. Compare throughput per governed engineer, not only seat cost.

Name it. Move the comparison from the license line to shipped work.

3. Seniors hate AI

Concede. "Skeptical senior engineers should help gate this rollout."

Counter. Cursor keeps them in the reviewer seat through Ask modeA read-only mode for asking questions about a codebase without changing files; the safe way to explore unfamiliar or legacy code. Press Enter for the full definition., reviewable Plans and a human-owned merge. It speeds up work without replacing their judgment.

Name it. Human review and separation of dutiesNo single person can author, approve and deploy the same change. The core control AI autonomy has to respect. Press Enter for the full definition..

4. "We tried AI, it wrote garbage"

Concede. "Ungoverned AI on a complex repository often writes bad code."

Counter. Project RulesVersion-controlled instructions in the repo that every Cursor agent interaction inherits, so standards are encoded once. Press Enter for the full definition., context, Plans and BugbotCursor's automated PR reviewer that posts inline findings and can push fix commits from isolated VMs. Press Enter for the full definition. change the result. Show the same task with rules on and off.

Name it. Policy in configuration plus automated review.

5. Juniors stop learning

Concede. "Copying code without understanding it is a real risk."

Counter. Ask modeA read-only mode for asking questions about a codebase without changing files; the safe way to explore unfamiliar or legacy code. Press Enter for the full definition. can explain a call graph. Plans make junior engineers state their intent, and reviews still happen. Box reported 75% usage growth in six weeks after a rollout with mentorship. Verify that vendor figure before quoting it.

Name it. Review gates and mentorship.

6. Seat-cost math

Concede. "Teams Standard at $40 per user each month, with Premium seats at $120 for heavy users, is a real budget issue."

Counter. Compare price with throughput, not with zero. Box reported 30 to 50% higher throughput and 80 to 90% less migration effort. Verify those vendor figures before quoting them. Enterprise sales negotiates volume discounts, and Enterprise pricing is custom.

Name it. Cost per unit of shipped work, not cost per seat.

7. "Our codebase is too weird/legacy/big"

Concede. "Legacy monoliths are the hard case."

Counter. That is why the demo uses a 15-year-old monolith instead of a todo app. Context, Project RulesVersion-controlled instructions in the repo that every Cursor agent interaction inherits, so standards are encoded once. Press Enter for the full definition. and Ask modeA read-only mode for asking questions about a codebase without changing files; the safe way to explore unfamiliar or legacy code. Press Enter for the full definition. help map unusual code. Cursor reports use by more than 64% of the Fortune 500.

Name it. Context work and repository-scoped rules.

Learn more

Optional practice

Review the objection response

QWhat should you do first when handling any of the seven objections?