---
title: "Cursor earns AIUC-1 certification for agent security and reliability"
description: "Cursor announces that it has earned AIUC-1 certification after an independent review of its organizational controls and agent behavior. AIUC-1 combines an organizational-controls audit with adversarial product testing, translating the NIST AI Risk Management Framework, MITRE ATLAS, and OWASP’s agentic threat taxonomy into requirements for live AI systems. Schellman reviewed documented controls and AI governance practices, while evaluators tested IDE and cloud agents in a representative enterprise configuration across several thousand scenarios and two rounds. Testing covered rules, hooks, Auto-review, model-level safeguards, secrets protection, secure code generation, MCP security, identity and permissions, and potentially destructive actions. Cursor says its safeguards held in benign and adversarial conditions, with certification requiring quarterly testing and an annual full audit as AIUC-1 evolves."
---

# Cursor earns AIUC-1 certification for agent security and reliability

[Cursor](https://yomu.fyi/company/cursor) · Kenneth Moras · Aug 13, 2026

**Type:** Announcement

## Summary

Cursor announces that it has earned AIUC-1 certification after an independent review of its organizational controls and agent behavior. AIUC-1 combines an organizational-controls audit with adversarial product testing, translating the NIST AI Risk Management Framework, MITRE ATLAS, and OWASP’s agentic threat taxonomy into requirements for live AI systems. Schellman reviewed documented controls and AI governance practices, while evaluators tested IDE and cloud agents in a representative enterprise configuration across several thousand scenarios and two rounds. Testing covered rules, hooks, Auto-review, model-level safeguards, secrets protection, secure code generation, MCP security, identity and permissions, and potentially destructive actions. Cursor says its safeguards held in benign and adversarial conditions, with certification requiring quarterly testing and an annual full audit as AIUC-1 evolves.

## Context

Cursor says growing agent autonomy and increasingly consequential enterprise work create a need for evidence about how agents behave under pressure. It contrasts AIUC-1 with traditional security certifications, which address data storage, protection, and governance but do less to evaluate an agent’s behavior in practice.

## Approach / What changed

Cursor underwent an independent audit by Schellman and adversarial testing across two rounds and several thousand scenarios. The assessment used a representative enterprise configuration across the IDE and cloud agents, testing controls including rules, hooks, Auto-review, model-level safeguards, and protections for secrets, secure code generation, MCP, identity, permissions, and destructive actions.

## Takeaways

- AIUC-1 combines an audit of organizational controls with adversarial testing of the product itself, based on requirements derived from NIST AI RMF, MITRE ATLAS, and OWASP’s agentic threat taxonomy.
- Schellman reviewed Cursor’s documented controls and AI governance practices, while evaluators tested the IDE and cloud agents across several thousand benign and adversarial scenarios.
- Maintaining AIUC-1 certification requires testing at least quarterly and a full audit each year; the standard itself is updated quarterly, including coding-agent requirements.

**Tags:** [AI Agents](https://yomu.fyi/topic/ai-agents), [AI Security](https://yomu.fyi/topic/ai-security), [Compliance](https://yomu.fyi/topic/compliance)

- Source: [Cursor](https://cursor.com/blog/aiuc-1)
- Source URL: https://cursor.com/blog/aiuc-1
- Ingested by Yomu: 2026-09-02T11:41:39.102Z

[Read original post](https://cursor.com/blog/aiuc-1)