Device trust as a zero-trust signal

Managing devices is table stakes. The reason fleet work matters at Cursor is that device posture becomes an input to every access decision - a healthy, compliant, managed device is the price of admission to sensitive systems and a non-compliant one gets blocked or challenged.

This is where the JD's "zero-trust architectures with Security and Engineering" line lands on the endpoint domain. Zero trust assumes no implicit trust from network location, so it asks three questions on every request: who is this, what device are they on and is that device healthy? MDM is what makes the second and third answerable.