November 2025 - Audit and High Leverage Fixes The engagement opened with Masterpoint’s audit of Cursor’s infrastructure: cloud environments Infrastructure as Code (IaC) & Terraform architecture CI/CD pipelines networking observability Within a week, Masterpoint delivered an audit report, a best practices checklist, and a security scan. The findings included IAM duplication accounted for 70% of the production Terraform state and noisy plan diffs caused engineer review fatigue. The audit phase targeted the highest-leverage fixes first: IAM resource deduplication, workspace trigger and path filter corrections so plans only ran when relevant code changed, and initial breaking up of the monolithic Terraform workspace to begin isolating Staging and Machine Learning infrastructure. Just one week later, Masterpoint had resolved the IAM duplication, with significant results: Before After Resource Count Before 8,480 → After 4,593 45.8% reduction in duplication Mean plan time Before 488s (8.1 min) → After 296s (4.9 min) 39.3% faster P50 plan time (median) Before 423s (7.1 min) → After 272s (4.5 min) 35.7% faster P95 plan time Before 749s (12.5 min) → After 414s (6.9 min) 44.7% faster This was accomplished without touching the workspace structure, and without any downtime. At the speed and scale Cursor operates, downtime simply isn’t an option. Every improvement had to land safely while the platform kept growing underneath it: even as Masterpoint deduplicated and trimmed resources, Cursor was continuously adding new ones. There was still more the systems could improve on.
Pin your MCP server contracts the way you pin your dependencies