Cursor Plugin

Installation Guide for Opsera DevSecOps Agent in Cursor

The Opsera DevSecOps Agent for Cursor brings enterprise-grade security, compliance, and architecture analysis directly into your development workflow.

By integrating seamlessly with Cursor, it enables developers to identify vulnerabilities, enforce compliance standards, and uncover architectural risks, without leaving their coding environment.

⚡ Quick Start

Steps to Install Opsera DevSecOps Agent Plugin

Install the Plugin

1. Go to https://cursor.com/marketplace/opsera
2. Click the Add to Cursor button.
3. Click Add Plugin.
4. From the pop-up screen, click View in Editor.
5. Under the cursor settings, the Opsera DevSecops Agent will be installed.

Run Your First Scan

Open Try in Chat and enter a command to start interacting with the Opsera agent.

Sample Prompts

Run a security scan on this repository

Identify the top 10 critical and high vulnerabilities

Analyze the architecture and highlight key risks

What are the biggest design issues in this codebase?

Run a compliance audit for SOC2

Check this project against ISO27001 standards

Run a pre-commit scan on my staged changes

Scan db/ for SQL vulnerabilities and suggest fixes

Find unsafe queries and convert them to parameterized queries

Sample Output

After successfully installing and running the Opsera DevSecOps Agent, you can expect a clear, actionable view of your codebase’s security, compliance posture, and architectural health.

What You Will See

Each execution (e.g., security-scan, architecture-analyze) produces:

• Severity Summary

  • Breakdown of Critical, High, Medium, and Low issues
• Detailed Findings

  • File-level insights with exact locations (file path + line number)
  • Clear description of each issue
• Actionable Recommendations

  • Step-by-step remediation guidance
  • Secure coding alternatives and best practices
• Contextual Insights

  • Why the issue matters
  • Potential impact on security or compliance

Supported Core Capabilities

Capability	What It Does
security-scan	Full vulnerability scan (SAST, secrets, containers, IaC)
architecture-analyze	Identifies design risks and system weaknesses
compliance-audit	Validates SOC2, HIPAA, PCI-DSS, ISO27001
sql-security	Finds SQL vulnerabilities + suggests fixes
pre-commit-scan	Automatic security scan before git commits — blocks commits if staged changes contain critical or high severity issues

Plugin Components

The Opsera DevSecOps Agent is composed of several integrated components that work together inside Cursor.

Note:

• Hooks: The plugin registers a beforeShellExecution hook. This allows the agent to intercept and inspect shell commands before they run, enabling real-time security enforcement as part of your development workflow.
• Rules: A devsecops-standards rule is included and active across all code changes. It enforces security-first coding practices, compliance awareness, and telemetry reporting automatically — no manual invocation required.
• MCP Integration: The plugin includes an opsera MCP (Model Context Protocol) server, enabling deeper integration with Cursor's agent infrastructure for tool use and context sharing..-
• Subagent: A devsecops subagent is registered by the plugin. It handles all DevSecOps tasks — risk assessment, vulnerability detection, compliance gap analysis, and SQL security scanning — and can be invoked directly in Cursor Chat

Commands

The following are the Commands available directly in Cursor:

Command	Description
architecture-analyze	Perform a risk-focused architecture analysis on the current codebase
compliance-audit	Run an evidence-based compliance audit on the current codebase
security-scan	Run a comprehensive security scan on the current codebase
sql-security	Scan SQL files or database tables for security vulnerabilities