AI Code Editors: Cursor Joins SpaceX, Windsurf Becomes Devin

Two leaders, two very different exits

Within about ten weeks in mid-2026, the two best-known challengers in AI-assisted coding stopped being independent products. Cursor became part of SpaceX. Windsurf was renamed and absorbed into Cognition's Devin brand. For developers, the effect is that two editors many teams relied on are now owned or rebranded by larger companies with their own priorities.

Cursor: from side project to SpaceX subsidiary

SpaceX closed its all-stock acquisition of Anysphere, Cursor's parent company, on August 14, 2026, at roughly $60 billion 23. Cursor's shares were converted into about 389 million SpaceX Class A shares, and the company now sits inside a newly created SpaceXAI division 3.

The valuation climbed very quickly. Cursor was valued at $400 million post-money at its Series A in August 2024, so the exit price is about a 150x markup in two years 2. Before the deal, Cursor raised a $900 million Series C led by Thrive in June 2025 at a $9.9 billion valuation. It then raised a $2.3 billion Series D in November 2025, co-led by Accel and Coatue with Google and Nvidia participating, which valued the company at $29.3 billion 3. That Series D was its last independent private mark, which means SpaceX paid roughly double it 3. Annual recurring revenue reportedly passed $4 billion along the way 2.

Accounts differ on when the $60 billion figure first appeared. One account says an April 2026 option agreement set that price 2. Another describes the acquisition as announced in June 2026 3. Both can be accurate: a private option in spring and a public announcement in summer. Either way, the price was fixed months before the deal closed.

Because the deal was all-stock, Cursor's value is now tied to SpaceX equity rather than to its own revenue growth. Those who back a merger argue that an AI coding tool fits a conglomerate's broader AI plans. Critics will ask whether Cursor's roadmap will now be shaped by SpaceXAI's goals rather than by working developers.

Windsurf: a quiet rename with a hard deadline

Windsurf's change came with less publicity. On June 2, 2026, Cognition pushed an over-the-air update that turned Windsurf into Devin Desktop 1. Plans, settings, extensions and keybindings carried over automatically, so most users just restarted the app and found it renamed 1. The rebrand followed a funding round that valued Cognition at $26 billion in late May 1.

The main practical issue is Cascade, the local agent that powered Windsurf. Cognition's documentation says it is end-of-life on July 1, 2026 1. Any CI pipeline, script or workflow that depends on Cascade has to be moved before then. Devin Desktop instead offers first-class support for outside agents through ACP, including Codex, Claude and Gemini 1.

That matters because Cascade was the main reason reviewers liked Windsurf. A widely shared early-2026 ranking called Windsurf the best editor for beginners, citing Cascade's context tracking, unlimited free Tab completions and an easier learning curve than Cursor 5. The same review said Windsurf had passed one million users 5. Removing Cascade takes away the feature those users chose it for.

The rankings are already out of date

The same early-2026 comparison named Cursor the best overall AI editor. It pointed to Supermaven-powered autocomplete, support for multiple models, and Composer mode for multi-file edits 5. It also listed alternatives: Zed's fast Rust-native editor, Claude Code's terminal-based agent, and open-source tools such as Cline and Continue.dev, which it said deliver about 80% of the paid experience for free 5.

That review still describes the features accurately, but its ownership picture no longer holds. Developers who want a tool they can be sure will stay independent may look harder at those open-source and standalone options now that the two leading products have changed hands.

The security question nobody solved

AI coding agents also carry a security risk that neither deal addresses. Researchers tested GitHub Copilot and Cursor with AIShellJack, a framework containing 314 attack payloads mapped to 70 MITRE ATT&CK techniques. Attackers hid malicious instructions in external development resources, and up to 84% of attempts got the agent to run malicious commands 4. Successful attacks ranged from system discovery to credential theft and data exfiltration 4. These editors can run terminal commands with real system privileges, so the injected text effectively gives an attacker a shell on the developer's machine 4.

The takeaway

The pattern is consolidation: the largest AI coding tools are being absorbed by bigger AI companies. For users, the takeaways are concrete:

• Windsurf users: move any workflow that depends on Cascade before July 1.
• Cursor users: watch for changes in Cursor's direction under SpaceXAI.
• Everyone: treat any agent that can run shell commands as a possible attack surface, regardless of who owns it.