AI SECURITYLABS

Security for Cursor Development: Before your first session

Part 8 of 16

Before your first session

  • Update Cursor: use 3.1.2 or later, and install updates when they are offered.
  • Turn on Workspace Trust: Cursor ships with it “disabled by default”, so every folder you open is trusted (Cursor docs).
  • Choose the run mode: Auto-review, or Allowlist with the sandbox on, in Settings > Agents > Approvals & Execution; never Run Everything on a machine with credentials.
  • Use your organisation’s account: its sandbox, run mode, MCP and model policies then apply.