Back to Guides
Guide5 October 2026

What does Cursor cost and which subscription tier fits a security - focused developer?

Decloak is an AI-powered web security intelligence platform that scans a site's HTTP/TLS posture, JavaScript, and third-party scripts to produce a report anyone can read. This guide is part of Decloak's library of practical, source-backed security guidance.

In this guide
  1. What is the price of each Cursor subscription tier?
  2. Which plan should a security - conscious solo developer choose?
  3. When is the Teams tier worth the $40 / user / mo cost?
  4. What extra security controls do Enterprise customers get?
  5. How to decide based on budget and security needs?
  6. Key takeaways

What is the price of each Cursor subscription tier?

The official Cursor pricing page lists four plans: Hobby (free), Individual ($20 per month), Teams ($40 per user per month), and Enterprise (custom pricing). The table below summarizes the cost and core features.

PlanMonthly priceKey security - related features
HobbyFreeLimited agent requests, no credit - card required - suitable for personal experimentation but lacks advanced security controls.
Individual$20Includes extended agent limits, frontier model access, and MCP/skill/hook support. No team - wide security policies.
Teams$40 per userAdds centralized billing, team marketplace, shared context, usage analytics, privacy mode, and SAML/OIDC SSO for stronger identity management.
EnterpriseCustomAll Teams features plus pooled usage, invoice/PO billing, SCIM seat management, advanced access controls, audit logs, AI code - tracking API, and priority support.

Which plan should a security - conscious solo developer choose?

For a single developer focused on security, the Individual tier at $20 / mo provides the most value. It adds frontier model access and the ability to install custom MCPs, which can be used to enforce security policies such as secret scanning or code - review linting. The Hobby tier lacks these extensions and may expose you to higher risk if you rely on default model behaviour.

When is the Teams tier worth the $40 / user / mo cost?

If you work in a small team (2 - 10 members) that needs centralized authentication and privacy mode, the Teams plan pays for itself. SAML/OIDC SSO lets you integrate with corporate identity providers, reducing credential - sprawl. Usage analytics help you monitor agent activity for anomalous patterns, an early warning for potential misuse.

What extra security controls do Enterprise customers get?

Enterprise customers receive advanced access controls, audit logs, and SCIM seat management, which are essential for large organisations with strict compliance requirements (e.g., SOC 2, ISO 27001). The AI code - tracking API can be tied into CI/CD pipelines to enforce security checks automatically, and priority support ensures rapid response to any security incidents involving the platform.

How to decide based on budget and security needs?

Decision factorHobbyIndividualTeamsEnterprise
Budget$0$20/mo$40 per user/moCustom
Team size112 - 1010+
Required authNoneNoneSAML/OIDC SSOSAML/OIDC SSO + SCIM
Audit & complianceNoneNoneBasic usage analyticsFull audit logs, advanced controls
Custom security extensionsLimitedYes (MCPs)Yes (MCPs + privacy mode)Yes (full suite)

If you only need basic code assistance and can manage security manually, Hobby may suffice. For any serious security workflow, Individual is the minimum viable tier, while Teams or Enterprise are justified only when you need organization - wide authentication and compliance reporting.

Key takeaways

Free security scan

See what's actually exposed on your site.

Decloak's free scan runs in about 15 seconds, no account required, and covers:

  • HTTP/TLS security posture
  • JavaScript CVEs
  • Exposed Supabase/Lovable/Base44 misconfigurations
  • AI-written executive summary