4.x/5
G2 rating
315 reviews on G2
Report
Should I Use Cursor?
Built to make you extraordinarily productive, agents turn ideas into code. Accelerate development by handing off tasks to Cursor.
Depends
DependsBuy if you are a professional developer or engineering team shipping code daily and can absorb usage-based costs.
Devs love the agents; pricing bites and CVEs are real. Buy for pros, skip for casuals.
Confidence: High
1.6/5
Trustpilot rating
322 reviews
$20/mo
Starting price
Pro plan; usage overages extra
$29.3B
Valuation
$2.3B raised; talks at $50B+
Value for money
2
2025 pricing backlash; power users report $200+ bills
Ease of use
3
Non-coders report shipping real projects
Feature depth
4
Agents, multi-file edits, enterprise admin controls
Support quality
2
Refund fights and 1.6/5 Trustpilot
Security posture
2
Five CVEs since 2025, including RCE
Pros
Cons
Gotchas
- highUsage pricing is opaque; power users report $200+/month vs the $20 plan
- high2025 Pro plan changes cut value silently; refunds came only after backlash12
- highMCPoison attack: poisoned repos can trigger code auto-execution; vet what you clone
- mediumSteady CVE stream means weekly patching and restricting agent permissions⁶
Best for
- Professional developers shipping daily
- Engineering teams adopting AI coding at scale
- Front-end and product teams prototyping fast
- Enterprises wanting centralized AI dev controls
Not for
- Casual coders who will hit Pro limits and hate overages
- Security-sensitive orgs with no capacity to vet agents and patch CVEs
- Anyone needing predictable flat monthly bills
- Non-technical founders expecting finished apps from pure prompts
Companies that use it
- Nokia
Pricing
Free
$0
- Limited usage for trying agents and autocomplete
Pro
$20/mo
- Higher limits
- Pay-as-you-go beyond caps
- Auto mode routes models
Usage-based overages
Varies
- Power users report $200+/month
- Regional Cursor Start pricing exists (e.g. ₹649 India)
Security
Active CVE stream 2025-2026 including remote code execution; patch fast and lock down agent permissions.
- CVE-2025-54135 'CurXecute' — remote code executionRCE vulnerability in Cursor, patched August 2025.⁶
- CVE-2025-54136 'MCPoison' — malicious repo auto-executionPoisoned repos could make the IDE auto-run malicious code via MCP config.⁹
- CVE-2026-48124 — RCE vulnerabilityRemote code execution flaw disclosed June 2026.⁷
- CVE-2026-22708 — RCE vulnerabilityRemote code execution flaw disclosed January 2026.
- CVE-2025-64110 — information disclosureInformation disclosure vulnerability documented in NVD, November 2025.⁸
What users say
Developers broadly praise Cursor's agent productivity and autocomplete, but many turned critical after 2025 pricing changes and quality dips.
Alternatives
Compare Cursor with each alternative.
GitHub Copilot
Native in VS Code; easiest switch if your org already pays Microsoft.
Claude Code
Terminal-based agents; some reviewers switched after Cursor frustrations.
Windsurf
Closest full-IDE rival; G2 compares them head-to-head.
Cursor vs WindsurfCline
Free, open-source agent coding option in 2026 comparisons.
Full analysis
Based on 50+ public sources: G2/Trustpilot reviews, CVE databases, pricing analyses, and funding news.
Sources
- Cursor Reviews 2026 — G2g2.comreview
- Cursor Reviews — Trustpilottrustpilot.comreview
- Cursor AI Review (2026) — Prismicprismic.ioreview
- Cursor Agents Review — Zachary Proserzackproser.comreview
- I gave up on using Cursor — Redditreddit.comreview
- CurXecute and MCPoison — Tenabletenable.comsecurity
- CVE-2026-48124 — SentinelOnesentinelone.comsecurity
- CVE-2025-64110 — NVDnvd.nist.govsecurity
- MCPoison — Check Point Researchresearch.checkpoint.comsecurity
- Cursor Pricingcursor.comofficial
- Cursor for Enterprisecursor.comofficial
- Cursor pricing backlash — FinTech Weeklyfintechweekly.comnews
- Cursor funding — Bloombergbloomberg.comnews
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.