Cursor enterprise

All ENTERPRISE Features

• Introduced Cursor Automations directly within the Agents Window for integrated management.(3.5)
• Enabled configuration of automations to attach multiple repositories, allowing agents to reason across diverse codebases.(3.5)
• Enabled creation of automations without any attached repository for non-code-based monitoring and actions.(3.5)
• Added five new no-repo automation templates to the Marketplace, including a Slack digest agent, product analytics agent, product FAQ agent, product finance agent, and customer health agent.(3.5)
• Enabled integration with Jira, allowing users to assign work items to Cursor or mention @Cursor in comments to start a cloud agent session.(05-19-26)
• Cursor now uses Jira work item details (title, description, comments) and repository settings to scope tasks initiated from Jira.(05-19-26)
• Agent completion updates are now shown directly in Jira, including a link to the generated pull request.(05-19-26)
• Enabled users to customize the effort level Bugbot uses for its Pull Request (PR) reviews, offering Default, High, and Custom configurations.(05-11-26)
• Introduced a Custom effort level configuration allowing users to describe in natural language when Bugbot should dynamically switch between default and high effort settings.(05-11-26)
• Introduced granular model access controls allowing admins to set allow or blocklists at the model and provider level.(05-04-26)
• Enabled blocking of entire providers or specific model configurations based on speed and context window size.(05-04-26)
• Added the option for enterprises to block new providers or model versions by default.(05-04-26)
• Enabled setting of soft spend limits instead of only hard limits to prevent accidental user blocking.(05-04-26)
• Implemented automatic usage alerts sent to users when they reach 50%, 80%, and 100% of their soft or hard limits.(05-04-26)
• Added the ability for admins to filter usage analytics by specific users.(05-04-26)
• Enabled breaking down usage analytics by product surface, including clients, Cloud Agents, automations, Bugbot, and Security Review.(05-04-26)
• Introduced Cursor Security Review beta on Teams and Enterprise plans, featuring two always-on security agents: Security Reviewer and Vulnerability Scanner.(05-01-26)
• Enabled Security Reviewer to check every Pull Request for security vulnerabilities, authentication regressions, privacy/data-handling risks, agent tool auto-approvals, and prompt injection attacks, leaving inline comments with severity and remediation.(05-01-26)
• Enabled Vulnerability Scanner to run scheduled scans of the codebase for known vulnerabilities, outdated dependencies, and configuration issues, with optional Slack notifications for findings.(05-01-26)
• Added capability to customize Cursor-managed security agents by adjusting triggers, adding custom instructions, providing custom tooling, and configuring output sharing, including plugging in existing SAST, SCA, and secrets scanners.(05-01-26)
• Enabled Bugbot to self-improve in real time by learning from feedback on pull requests to generate and promote learned rules.(04-08-26)
• Introduced support for MCP servers to provide Bugbot with additional context during code reviews on Teams and Enterprise plans.(04-08-26)
• Introduced the new Agents Window interface allowing users to run many agents in parallel across repos and environments (locally, worktrees, cloud, SSH).(3.0)
• Enabled Design Mode within the Agents Window to annotate and target UI elements directly in the browser for more precise feedback.(3.0)
• Added keyboard shortcuts for Design Mode: → ⌘+Shift+D to toggle, Shift+drag to select an area, → ⌘+L to add element to chat, and → Option+click to add element to input.(3.0)
• Added Agent Tabs in the Editor to view multiple chats side-by-side or in a grid.(3.0)
• Added a new command /worktree that creates a separate git worktree for isolated changes.(3.0)
• Added a new command /best-of-n that runs the same task in parallel across multiple models in isolated worktrees and compares outcomes.(3.0)
• Enabled MCP Apps to support structured content for richer tool outputs.(3.0)
• Added directory group name to audit logs for improved human readability.(3.0)
• Added a team-level Admin setting to restrict creating, editing, and deleting team secrets to Admins.(3.0)
• Added an Enterprise Admin control for disabling "Made with Cursor" code attribution for the entire team.(3.0)
• Introduced the Cursor Marketplace for discovering and installing plugins to extend Cursor's capabilities.(2.5)
• Enabled granular network access controls for sandboxed commands, allowing users to define allowed domains (User config only, User config with defaults, Allow all).(2.5)
• Enabled asynchronous execution for subagents, allowing the parent agent to continue working while subagents run in the background.(2.5)
• Enabled subagents to spawn their own subagents, supporting complex tasks like multi-file features and large refactors.(2.5)
• Introduced long-running agents capable of planning and completing larger, more complex tasks autonomously.(02-12-26)
• Enabled long-running agents to deliver larger, more complete Pull Requests (PRs) with fewer follow-up tasks.(02-12-26)
• Introduced Subagents, specialized, independent agents that run in parallel with custom configurations for faster, more focused task execution.(2.4)
• Enabled direct image generation from the agent using text descriptions or reference uploads, saving previews inline and to the assets/ folder.(2.4)
• Launched Cursor Blame (Enterprise plan feature) extending git blame with AI attribution, showing which lines were AI-generated (by Tab completions or agent runs) versus human-written.(2.4)
• Added the ability for agents to ask clarifying questions during Plan and Debug modes, allowing them to continue working while waiting for user input.(2.4)
• Enabled building custom subagents and skills that utilize the new 'ask question tool'.(2.4)
• Introduced Conversation Insights to analyze agent sessions, categorizing work type (Bug fixes, refactoring, explanation) and complexity.(enterprise-dec-2025)
• Enabled sharing of agent conversations via read-only transcripts, which can be forked to start new conversations from the same context.(enterprise-dec-2025)
• Added Billing Groups functionality for enterprise users to map usage and spend to organizational structure, set budget alerts, and track team adoption.(enterprise-dec-2025)
• Extended Linux sandboxing support for agents, complementing existing macOS support, allowing scoped access control.(enterprise-dec-2025)
• Launched Service Accounts for non-human automation, enabling secure configuration, API calls, and cloud agent invocation without tying workflows to individual developer accounts.(enterprise-dec-2025)
• Introduced AI Code Reviews directly in the editor to find and fix bugs within your changes via a sidepanel.(2.1)
• Enabled Instant Grep (Beta) so that all agent-run grep commands, including manual sidebar searches and regex searches, execute instantly across all models.(2.1)
• Introduced a new Multi-Agents editor featuring a sidebar for managing agents and plans.(2.0)
• Enabled running up to eight agents in parallel on a single prompt using isolated environments (git worktrees or remote machines).(2.0)
• Introduced Composer, a new agentic coding model that is 4x faster than similarly intelligent models.(2.0)
• Launched Browser functionality to General Availability (GA) with added support for Enterprise teams.(2.0)
• Enabled Browser to be embedded in-editor, including new tools for element selection and forwarding DOM information to the agent.(2.0)
• Enabled defining custom commands and rules for your Team via the Cursor dashboard, automatically applied to all members.(2.0)
• Introduced Voice Mode, allowing control of the Agent using built-in speech-to-text conversion.(2.0)
• Enabled defining custom submit keywords in settings to trigger the agent to begin running in Voice Mode.(2.0)
• Enabled creating plans with one model and building the plan with another, with options for foreground, background, or parallel agent execution.(2.0)
• Enabled sharing custom rules, commands, and prompts with the entire team via deeplinks.(2.0)
• Enabled Enterprise teams to distribute hooks directly from the web dashboard, including managing drafts and OS targeting.(2.0)
• Enabled viewing a timestamped Audit Log of admin events including user access, setting changes, and team rule edits.(2.0)