[px43]

> Cursor does not have a bug bounty

Shouldn't this alone be considered criminal negligence at this point? Cursor isn't some random open source project. It's a company that has funding, and subscriptions. Hell, I pay Cursor for a monthly subscription. Pretty incredible that they have no bounty program.

[britannio]

The lack of a bug bounty program doesn't prohibit them from rewarding reported vulnerabilities.

[taskforcegemini]

do they though?