Safeguard
Developer Tools•

Windsurf Alternatives in 2026: Editors and Terminal Agents

Windsurf is now Devin Desktop. Alternatives in 2026 include Cursor, VS Code, Zed and Kiro as editors, and Claude Code, Codex and OpenCode in the terminal.

Safeguard Security Team
18 min read

Windsurf became Devin Desktop on 2 June 2026, with the same editor under the Devin brand. If you want an alternative, editor options include Cursor, Visual Studio Code, Zed and Kiro. Terminal options include Claude Code, Codex CLI, Gemini CLI, OpenCode and Aider. Safeguard adds a CLI, desktop and mobile apps that work as one experience.

You do not have to give up the AI plan you already pay for to switch. Bring the Claude, ChatGPT or Codex plan you already pay for and use it inside the Safeguard CLI. Safeguard adds no extra charge for that usage; your plan's own usage limits and terms still apply. You can also connect Claude or ChatGPT to the Safeguard MCP server and use Safeguard from the chat you already use.

Every third-party fact below comes from the tool's own docs, repository or product page, linked in the sources. There are no rankings, because an editor and a terminal agent do different jobs.

What happened to Windsurf

The Devin Desktop FAQ says: "On June 2, 2026, Windsurf is becoming Devin Desktop." It arrived as a regular over-the-air update. The FAQ is direct about what that means:

  • Same editor. "Devin Desktop is the new name for Windsurf. It's the same IDE, same editor, and has the same features."
  • New default view. The Agent Command Center becomes the primary view.
  • Plans unchanged. "Your plan, pricing, and access remain the same. Only the name and branding are changing."
  • Settings carried over. "All of your Windsurf settings will be ported to Devin Desktop automatically," and extensions come with them.
  • Agent renamed. The FAQ said "The existing Cascade agent remains available through July" and that the local agent becomes Devin Local, using "the exact same pricing model as Cascade."
  • JetBrains. "The Windsurf JetBrains plugin is in maintenance mode and Cascade inside it is being deprecated." The FAQ recommends switching to Devin over ACP.
  • App name. The app name changes to Devin on macOS, Windows and Linux, which the FAQ says may affect MDM and endpoint policies.

Devin Desktop's getting started page lists macOS, Windows 10 and later, and Linux as a tarball, deb or rpm package (sudo apt install devin-desktop or sudo dnf install -y devin-desktop once the repository is added). You log in with a Devin account, and you can import a VS Code or Cursor configuration from the command palette.

There is also Devin CLI, "a local command-line coding agent with deep Devin Cloud integration," installed with curl -fsSL https://cli.devin.ai/install.sh | bash or brew install --cask devin-cli. Its docs say it "does not yet support Knowledge, Playbooks, or Secrets from your Devin account."

So staying is a real option. If you are looking elsewhere anyway, here is what else exists.

Windsurf alternatives: editors

Each entry covers what the tool is, how it runs, its licence and one thing to know before adopting it.

Cursor

Cursor's docs call it "a coding agent for building ambitious software." It ships as an editor and as a CLI, which installs with curl https://cursor.com/install -fsS | bash on macOS, Linux and WSL and starts with agent. The CLI has Agent, Plan and Ask modes, a /sandbox setting for command execution, and agent -p for CI. One thing to know: you can add your own OpenAI, Anthropic, Google, Azure OpenAI or Bedrock keys, but "Custom API keys only work with chat models. Tab completion continues using Cursor's built-in models."

Visual Studio Code

The Code - OSS repository is MIT licensed, and the README says Visual Studio Code is a distribution of it "released under a traditional Microsoft product license." AI features come through GitHub Copilot, and VS Code's docs say bring-your-own-key models "work without signing into a GitHub account and without a Copilot plan," with built-in providers including Azure, Anthropic, Gemini and OpenAI. The limit: "BYOK applies to the chat experience and utility tasks only," so inline suggestions still need a GitHub account.

Zed

Zed is "a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter," for macOS, Linux and Windows, "licensed primarily under GPL-3.0-or-later, with Apache-2.0 components where marked." It takes API keys for Anthropic, OpenAI, Google AI, Mistral, DeepSeek, xAI and compatible endpoints, stored in the system keychain. It also hosts external agents over the Agent Client Protocol, including Claude Agent, Codex, Gemini CLI and OpenCode, each of which "owns its own authentication." Zed's docs say "Zed does not charge for External Agents," and that ChatGPT Plus and Pro work through its ChatGPT Subscription provider.

Kiro

Kiro's site describes it as "an agentic AI with an IDE, CLI, web interface, mobile app," and says it is "Built and operated by AWS." Its docs describe the IDE as a "Desktop editor with chat, specs, hooks, and full editor integration," where specs plan a feature with requirements, design and tasks. You sign in with GitHub, Google, AWS Builder ID or AWS IAM Identity Center, and the site lists Anthropic Claude, OpenAI GPT and open-weight models plus an Auto option. One thing to know: "You do not need an AWS account to use Kiro." The pages we fetched state no open-source licence for it.

Windsurf alternatives: terminal agents

If you mainly used Cascade to run multi-step tasks, a terminal agent may be the closer fit.

Claude Code

Anthropic describes Claude Code as "an agentic coding tool that reads your codebase, edits files, runs commands, and integrates with your development tools." Install it with curl -fsSL https://claude.ai/install.sh | bash or irm https://claude.ai/install.ps1 | iex; it also runs as a VS Code extension, a JetBrains plugin, a desktop app and on the web. You log in with Claude Pro, Max, Team or Enterprise, a Console account or a cloud provider, and Claude's pricing page says "Claude Code is included in all paid plans." Shift+Tab switches permission modes; the docs reserve bypassPermissions for isolated containers and VMs.

OpenAI Codex CLI

Codex CLI is "a coding agent from OpenAI that runs locally on your computer," under Apache-2.0, installed with npm install -g @openai/codex or brew install --cask codex. You sign in with ChatGPT on a Plus, Pro, Business, Edu or Enterprise plan, or with an API key at standard API pricing. The README names VS Code, Cursor and Windsurf for its IDE extension, so you can try it inside the editor you already have. Network access is off by default, and sandbox modes run from read-only to danger-full-access.

Gemini CLI

Gemini CLI is "an open-source AI agent that brings the power of Gemini directly into your terminal," licensed Apache 2.0, installed with npm install -g @google/gemini-cli or brew install gemini-cli. You authenticate with a Google account, a Gemini API key or Vertex AI. Read the notice first: the README says "Gemini CLI was replaced by Antigravity CLI on June 18th, 2026" for unpaid tier and Google One users.

OpenCode

OpenCode is "the open source AI coding agent," a terminal UI with a desktop app in beta, under MIT. Its providers page lists 75 or more LLM providers plus local models, with ChatGPT Plus or Pro sign-in and a GitHub Copilot subscription option. The built-in build agent has full access, while plan blocks file edits and asks before shell commands. See our OpenCode alternatives guide for more.

Aider

Aider is "AI pair programming in your terminal," under Apache-2.0, installed with python -m pip install aider-install then aider-install. It "can connect to almost any LLM, including local models." It "automatically commits changes with sensible commit messages," so every change can be undone with git, and you can ask for changes by adding comments in your editor.

Comparison table

Facts only, from each project's own pages.

ToolKindSurfacesLicenceSign-in and modelsWhere code runs
Devin Desktop (formerly Windsurf)EditormacOS, Windows, LinuxCommercial productDevin accountYour machine; Devin Cloud separate
CursorEditor and CLIEditor, CLICommercial productCursor plan; own keys for chat modelsYour machine; requests via Cursor's servers
VS CodeEditormacOS, Windows, LinuxCode - OSS is MIT; product under Microsoft licenceCopilot plan; own keys for chatYour machine
ZedEditormacOS, Linux, WindowsGPL-3.0-or-later, Apache-2.0 partsAPI keys, ChatGPT Plus or Pro, Copilot, external agentsYour machine
KiroEditor and CLIIDE, CLI, web, mobileNo licence stated on pages fetchedGitHub, Google, AWS Builder ID, IAM Identity CenterIDE and CLI on your machine; web and mobile apps too
Claude CodeTerminal agentTerminal, IDE, desktop, webCommercial productClaude paid plans, Console, cloud providersYour machine; web sessions in the cloud
Codex CLITerminal agentCLI, IDE extension, desktop app, cloudApache-2.0ChatGPT plans or API keyYour machine; Codex cloud
Gemini CLITerminal agentTerminalApache 2.0Google account, Gemini API key, Vertex AIYour machine
OpenCodeTerminal agentTerminal UI, desktop (beta)MIT75+ providers, local modelsYour machine
AiderTerminal agentTerminal, editor commentsApache-2.0Almost any LLM, local modelsYour machine
SafeguardCLI, desktop, mobileCLI, desktop, iOS, Android, IDE, browser, cloudSafeguard productYour Claude, ChatGPT or Codex plan; /modelScans on your machine; only results uploaded

Which option fits your team

This is matched on what each tool says it supports, not on a quality test.

  • You liked the Windsurf editor. Devin Desktop is the same IDE with your plan unchanged. Cursor, VS Code, Zed and Kiro are the other editor routes.
  • You want an open-source editor base. Zed's source is GPL-3.0-or-later, and VS Code's Code - OSS base is MIT.
  • You are on JetBrains. The Windsurf JetBrains plugin is in maintenance mode. Claude Code ships a JetBrains plugin, and the Safeguard IDE extension has a JetBrains build.
  • You pay for ChatGPT. Codex signs in with your plan, and its IDE extension supports Windsurf, Cursor and VS Code. Zed and OpenCode also offer ChatGPT Plus or Pro sign-in.
  • You pay for Claude. Claude Code is included in Claude's paid plans.
  • You live in git. Aider commits every change, so review and rollback are ordinary git tasks.
  • You want one experience across devices, with security built in. Safeguard runs in your terminal, on the desktop and on your phone.

Moving from Windsurf, step by step

Setup walkthrough

  1. Inventory what you use. List extensions, MCP servers, rules, the plan you pay for, and any endpoint or MDM rule that names the Windsurf app.
  2. Take a baseline scan. Run safeguard scan --dir . and keep ./output/vuln.json as your before picture.
  3. Pick an editor, a terminal agent or both. Many teams keep an editor and add a terminal agent for longer tasks.
  4. Install with the vendor's own command.
# Claude Code
curl -fsSL https://claude.ai/install.sh | bash

# Codex CLI
npm install -g @openai/codex

# Gemini CLI
npm install -g @google/gemini-cli

# OpenCode
curl -fsSL https://opencode.ai/v2/install | bash
  1. Sign in with the plan you already pay for. In Claude Code, /status shows which credential is active. In Codex, choose the ChatGPT sign-in on first run.
  2. Set the approval mode before the first task. For example, codex --sandbox read-only --ask-for-approval on-request, Claude Code's Manual mode, OpenCode's plan agent, or Safeguard's Ask.
  3. Bring editor extensions across. The Safeguard IDE extension is on the VS Code Marketplace, JetBrains Marketplace and Open VSX, which the download page lists for Cursor, Windsurf and Codium.
  4. Pilot on one repository, then scan again and compare against the baseline. Anything new came from the pilot.
  5. Update CI last. Replace any agent step with the new tool's non-interactive mode and keep a scan or safeguard exec step after it.

Common mistakes

  • Assuming Windsurf was removed. The FAQ says "Nothing is getting removed" and your plan stays the same. Decide on facts, not on the rename.
  • Missing the app rename in device policy. The app is now named Devin on every OS, which can affect MDM and endpoint rules.
  • Staying on the legacy JetBrains plugin. The FAQ says newer JetBrains releases can break it.
  • Overlooking the Gemini CLI notice. For unpaid tier and Google One users, Gemini CLI was replaced by Antigravity CLI on 18 June 2026.
  • Starting in the most permissive mode. Codex --yolo, Claude Code bypassPermissions and Safeguard Yolo approve everything.
  • Reading only the diff. A diff will not tell you a new dependency carries a known vulnerability. Our guide to checking what a coding agent changed covers the scan step.

Safeguard: one experience across terminal, desktop and phone

Safeguard is the alternative you can switch to and keep what you pay for. Bring the Claude, ChatGPT or Codex plan you already pay for and use it inside the Safeguard CLI. Safeguard adds no extra charge for that usage; your plan's own usage limits and terms still apply.

The idea is one platform on every surface. Start in the terminal, continue on the desktop, check findings on your phone.

Install the CLI

# macOS and Linux
curl -fsSL https://cli.safeguard.sh/install | bash
# Windows
irm https://cli.safeguard.sh/install.ps1 | iex

The Safeguard CLI is a single static binary with no Node, Python or JVM needed. The download page lists CLI 1.4.0 for macOS Apple Silicon and Intel, Linux x86_64 and arm64, and Windows x86_64. It scans code, container images and SBOMs on your own machine, sends only the results to the platform, and includes an assistant that writes code and fixes what it finds.

First session

Run safeguard to open the interactive terminal, /login to sign in through the browser, and /scan . to scan the current folder. Then ask in plain language, such as "fix the lodash CVE in this repo" or "how many critical vulns do we have". @ attaches a file from the folder you started in, /model shows or switches the AI model, and /resume picks up the last session in that folder.

Writing and fixing code

The assistant has tools for your local files and for your Safeguard data. It can write files, edit code and run commands, with your approval, so it doubles as a general terminal assistant: the docs list "what's the latest file in ~/Downloads" next to the security questions. Our post on the Safeguard CLI as an AI assistant on your machine goes further.

This demo attaches a computer running the Safeguard CLI and a folder, asks for a fix, reviews the diff and approves the command before it runs. The demo notes that computer work from Search is available and expanding.

Click through it at your own pace, or open it full screen.

Approvals

/permissions sets the approval mode: Ask prompts before every action, Auto approves known actions and asks for anything new (the default), and Yolo approves everything.

Scans and CI

safeguard scan --dir .
safeguard scan --image your-image:latest
safeguard validate ./sbom.cdx.json
safeguard exec "summarise the critical findings in this repository"

Scans build an SBOM and match it against vulnerability databases, writing vuln.json, license.json and other files under ./output. safeguard exec runs one non-interactive assistant turn for CI. When the local runner runs platform scan jobs, your source never leaves the machine; only SBOMs and findings are uploaded. Policies and gates are evaluated in the platform.

Continue on the desktop

Desktop 3.2.2 lets you ask your supply chain anything in plain English in a native window. On Windows 10 and 11, one per-user installer covers x64 and ARM and needs no admin rights. It is not yet code-signed, so SmartScreen may warn: verify the SHA-256 first, then choose More info, Run anyway. macOS has a signed and notarized Apple Silicon build for macOS 12 and later, with an Intel build linked. Linux has an AppImage for x86_64.

Check findings on your phone

The iOS app is on the App Store for iPhone and iPad. Android is on Google Play for phones and tablets, with a direct APK (1.0.2) and a SHA-256 to check for phones without Google Play or for company-managed rollout. Samsung Galaxy phones and tablets install from Google Play.

Keep using Claude or ChatGPT

Connect Claude or ChatGPT to the Safeguard MCP server and ask about your findings from the chat you already use. This demo connects Claude with OAuth and chooses which tools Claude can use.

Click through it at your own pace, or open it full screen.

Editors, browsers and the cloud

IDE extensions cover VS Code, JetBrains and Open VSX editors including Cursor and Windsurf. Browser extension 1.0.4 is on the Chrome Web Store (Chrome, Brave, Arc, Vivaldi, Opera, Edge), Firefox Add-ons, and Safari on iPhone and iPad inside the iOS app; Safari on Mac is in Apple review. With nothing to install, there is the web interface, the Cloud CLI and cloud computer hosted by Safeguard, and a cloud sandbox tenant against a seeded demo repo, free for seven days with no card.

Download Safeguard and read the CLI docs to get started.

FAQ

Is Windsurf discontinued?

No. The Devin Desktop FAQ says Windsurf became Devin Desktop on 2 June 2026, "the same IDE, same editor," and that "Nothing is getting removed." Plans and pricing stayed the same.

What happened to Cascade?

The FAQ said Cascade would remain available through July 2026 and that the local agent is being brought under the Devin brand as Devin Local, with the same pricing model as Cascade.

Can I switch to Safeguard and keep my Claude, ChatGPT or Codex plan?

Yes. Bring the Claude, ChatGPT or Codex plan you already pay for and use it inside the Safeguard CLI. Safeguard adds no extra charge for that usage; your plan's own usage limits and terms still apply. You can also connect Claude or ChatGPT to the Safeguard MCP server.

Which Windsurf alternatives are open source?

From their own repositories: Codex CLI (Apache-2.0), Gemini CLI (Apache 2.0), OpenCode (MIT), Aider (Apache-2.0), Zed (GPL-3.0-or-later with Apache-2.0 parts) and the Code - OSS base of VS Code (MIT).

Can I use Codex inside Windsurf or Devin Desktop?

The Codex README names Windsurf, alongside VS Code and Cursor, as an editor for its IDE extension. You sign in with your ChatGPT plan or an API key.

Is the Windsurf JetBrains plugin still supported?

The FAQ says it is in maintenance mode, Cascade inside it is being deprecated, and newer JetBrains releases can break it. It recommends Devin over ACP.

Is Safeguard on Samsung or Huawei devices?

Galaxy phones and tablets install the Android app from Google Play, and Galaxy Book laptops on Windows use the Windows app and CLI. Safeguard is not in Huawei AppGallery. MateBooks running Windows use the Windows app and CLI, and phones that install Android apps can use the direct APK; otherwise use the web interface or cloud options.

Where does my code go?

Editors and terminal agents work on your machine, and your model provider receives what the agent sends. Cursor routes requests through its servers, and Codex cloud and Claude Code on the web run in the cloud. With the Safeguard local runner, source stays on your machine and only SBOMs and findings are uploaded.

Try it yourself

This walkthrough sets up the runner on your own machine: pick the platform, start it, approve it with its device code, then use the same CLI to scan from the terminal.

Click through it at your own pace, or open it full screen.

Quick check

On what date did Windsurf become Devin Desktop?

2 June 2026, as a regular over-the-air update. The FAQ says it is the same IDE and that plans and pricing are unchanged.

Why might the Safeguard desktop app trigger a SmartScreen warning on Windows?

The Windows build is not yet code-signed. Verify the SHA-256 on the download page first, then choose More info, Run anyway.

Sources

Last reviewed: 21 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.