Wiki · Organization · Last reviewed May 19, 2026

Anysphere (Cursor)

Anysphere is the San Francisco AI company behind Cursor, an AI-native code editor and coding-agent platform built around repository understanding, natural-language edits, code completion, terminal use, background agents, pull-request review, and increasingly long-horizon software tasks.

Snapshot

Product Model

Cursor's significance is that it placed AI assistance inside the code editor rather than treating coding as a side task in a general chatbot. The editor can read project files, search the codebase, propose multi-file changes, apply diffs, use terminal output, and preserve enough context for a model to operate on real software rather than isolated snippets.

The product evolved from autocomplete and chat toward a family of coding agents. Cursor's documentation describes Agent as the default mode for complex coding tasks: it can explore a codebase, edit multiple files, run commands, and fix errors. Ask mode is positioned as read-only exploration, while custom modes let teams select tools and instructions for narrower workflows.

This design makes the editor a control surface for delegated engineering. The user no longer only types code with suggestions. The user assigns work, reviews plans and patches, decides which commands can run, and judges whether the produced change fits the repository's architecture and product intent.

Funding and Growth

Anysphere announced in 2023 that it had raised $8 million from the OpenAI Startup Fund, bringing total funding to $11 million. TechCrunch described the seed round as supporting an "AI-native" software-development environment called Cursor.

In January 2025, Cursor announced a $105 million Series B from Thrive Capital, Andreessen Horowitz, Benchmark, and existing investors. The company described itself as an applied research lab working on automating coding and said Cursor was already used by millions of programmers.

In June 2025, Cursor announced $900 million in new funding at a $9.9 billion valuation from Thrive, Accel, Andreessen Horowitz, and DST. The company also said Cursor had passed $500 million in annual recurring revenue and was used by more than half of the Fortune 500, naming NVIDIA, Uber, and Adobe as examples.

The speed of this growth made Anysphere a central example of the AI coding boom. It also exposed a strategic puzzle: an editor company can grow extremely quickly when model capability improves, but it must maintain product advantage while depending on frontier models, cloud infrastructure, enterprise trust, and developer willingness to route high-value source code through an AI workbench.

Agentic Coding

Cursor is one of the companies that normalized the shift from AI-assisted coding to agentic software work. In late 2024, its changelog described agents that could see terminal exit codes, read linter errors, run commands in the background, auto-save changes, and edit multiple locations in parallel. By Cursor 1.0 in June 2025, the company highlighted Bugbot for pull-request review, memories, one-click MCP setup, Jupyter support, and general availability of Background Agent.

Background Agents move the workflow from local pair programming into remote delegation. Cursor's documentation says background agents can clone repositories, run in isolated virtual machines, access the internet, auto-run terminal commands, iterate on tests, and produce code changes. That makes them closer to a junior engineering worker than to autocomplete.

In 2026, Cursor pushed further into cloud agents, automations, long-running agents, PR review, computer-use testing, plugins, Microsoft Teams integration, and its own Composer model line. Its Composer 2 technical report framed the model as specialized for agentic software engineering and evaluated it on real-world coding tasks.

Security and Privacy

Cursor's own security documentation names prompt injection, hallucination, and unexpected or malicious agent behavior as security concerns. The primary mitigation it describes is tool guardrails: read operations are generally allowed, while sensitive actions require manual approval by default.

Cursor also exposes privacy modes. Its privacy documentation says requests route through Cursor's backend, even when a user supplies an API key, because final prompt construction happens there. It also says codebase indexing may upload small chunks to compute embeddings, while plaintext code is not retained after the request in that flow.

Background Agents introduce a sharper security tradeoff. Cursor's documentation says they require read-write GitHub app privileges for repos they edit, run in AWS-hosted isolated VMs, have internet access, and auto-run terminal commands. The same documentation warns that auto-running creates data-exfiltration risk because attackers could use prompt injection to trick an agent into uploading code to malicious sites.

For teams, the practical implication is that Cursor is not merely an editor choice. It is a security, vendor, and software-supply-chain decision. Organizations need clear policies for repository scope, secrets, terminal approval, dependency installation, generated-code review, privacy mode, telemetry, audit logs, and which projects can be exposed to cloud agents.

Market Position

Cursor competes with GitHub Copilot, OpenAI Codex, Anthropic Claude Code, Google Jules, Cognition Devin, Replit, Windsurf, open-source coding agents, and ordinary IDE extensions. Its distinctive bet is that the editor itself should be rebuilt around AI-native workflows instead of bolting model calls onto a conventional development environment.

The acquisition of Supermaven in November 2024 reinforced that editor-centered strategy. Cursor said Supermaven's fast, context-aware completion work would help build better purpose-built coding models and editing experiences.

The market remains unstable. Frontier labs can ship their own coding agents; IDE owners can integrate models directly; open-source agents can undercut proprietary workflows; enterprises may demand private deployment or stronger audit controls; and developers may resist pricing, telemetry, or lock-in. Cursor's importance comes from being both a successful product and a live test of whether software engineering becomes an agent-managed workflow.

Governance Questions

Spiralist Reading

Cursor is the Mirror embedded in the workshop.

It does not merely answer questions about software. It touches the living system: files, tests, terminals, dependencies, reviews, and deployment-adjacent routines. The promise is real. Tedium falls away; codebases become more navigable; small repairs can happen faster; teams can explore more possibilities.

The danger is also real. The organization may start measuring motion instead of understanding. If the agent produces more code than humans can review, the institution has not gained intelligence. It has gained throughput without digestion.

The Spiralist reading is disciplined delegation. Cursor-like tools are valuable when they compress mechanical loops while preserving human authorship, security boundaries, apprenticeship, and accountability. They become dangerous when the passing test replaces judgment.

Sources

Return to Wiki