Graded B- on resilience. In Vannus's assessment it builds its own model-layer IP on top of a third-party core — resilient — owns model IP or routes across providers.
Composer 2.5 is Cursor's own model, trained to be highly capable for agentic coding.
Vannus grades Cursor against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →