Case Study: Cursor achieves secure, low-noise dependency management with Endor Labs

Cursor reduces SCA noise 97.5% with Endor Labs

Cursor, an AI code editor owned by Anysphere, faced a significant challenge in balancing application security with rapid development. Their existing software composition analysis (SCA) tool generated excessive noise by flagging every vulnerability without context and provided risky upgrade advice that threatened system stability. This created a major drain on developer productivity and security resources.

By implementing Endor Labs for SCA and dependency management, Cursor achieved a 97.5% reduction in noise through function-level reachability analysis. This precision allowed their security team to own the remediation process, confidently upgrading only the exploitable dependencies without introducing breaking changes. The solution from Endor Labs enabled Cursor to maintain a secure, stable product while keeping its engineers focused on development.

Cursor (owned by Anysphere)