Private Preview

Windsurf

Rencore monitors Windsurf across 16 governance policies, 3 reports, and 8 inventories, detecting unused seats, cost overruns, and adoption gaps automatically.

Published 16 May 2026 For Head of IT, CISO

Code

Windsurf is in private preview. Join the waiting list and we will reach out when access opens up.

Join the waiting list

Definition

Rencore Windsurf governance is a set of 16 policies, 3 reports, 5 segments, and 8 inventories that audit Codeium's Windsurf AI coding IDE for seat waste, cost overruns, and usage issues. It detects inactive members consuming paid seats, Cascade agentic runs exceeding budget thresholds, chat sessions indicating adoption problems, and audit events requiring security review.

See Windsurf in Rencore

Every Windsurf object Rencore discovers and inventories across your tenant.

The governance policies Rencore evaluates against Windsurf, with severity and category.

Built-in Windsurf reports and analytics views in Rencore.

The Windsurf governance dashboard, summarizing risks and status at a glance.

Step 1 of 4

37 governance capabilities: 8 inventories · 16 policies · 3 reports · 5 segments · 2 automations

Why govern Windsurf with Rencore

Optimize seat utilization

Detect members inactive for 90+ days, seats assigned to users deactivated in Entra ID, and teams where actual usage is below the seat allocation. Reclaim wasted licenses.

Track Cascade agentic usage

Monitor Cascade agentic runs, chat sessions, and model usage across the organization. Reports show which teams use Windsurf most and which models drive the highest engagement.

Review security events

Inventory audit events and detect usage patterns that require security review. Policies flag anomalous activity and accounts with access beyond organizational policy.

What Rencore discovers

Rencore automatically inventories these Windsurf object types.

Windsurf Team

A Windsurf team (workspace); top-level container for members, seats, usage, cascade runs, chat sessions, and models.

Windsurf Member

Individual accounts with access to a Windsurf team.

Windsurf Seat

A Windsurf seat assignment on the team license.

Windsurf Daily Usage

Daily usage rollup per member; completions, chat, cascade runs, credits, top model.

Windsurf Cascade Run

A single Cascade (agentic run) invocation; model, duration, tool calls, credits.

Windsurf Chat Session

An inline chat conversation; message count, primary model, credits.

How Windsurf governance works in Rencore

Rencore connects to Windsurf via the Codeium API and inventories members, seats, Cascade agentic runs, chat sessions, model usage, and audit events. Policies run on every scan cycle and flag seat waste, cost overruns, and security issues.

Who uses Windsurf governance

Heads of IT use seat utilization policies to justify Windsurf spend and recover unused seats. CISOs review audit events and access policies to enforce security boundaries. Engineering leads use adoption reports to compare Windsurf usage with other AI coding tools.

Getting started

Provide Rencore with Windsurf API credentials. All 16 policies activate on first scan, covering members, seats, and usage data automatically.

Policies

16 governance rules that detect violations and risks.

Severity Category

Windsurf member is an admin

Members with the admin role have a wider blast radius, raising the likelihood that any weakness is exploited.

High Security

Windsurf Cascade run performed tool calls

Runs that invoked tools acted on external systems, raising the likelihood of real-world impact.

High Security

Windsurf user using disallowed model

Detects use of models not on the approved allowlist.

High Adoption

Windsurf member is active

Active members are live, in-use identities, raising the likelihood that any weakness is exploited.

Medium Operation

Windsurf seat is active

Active seats are live, reachable license assignments, raising the likelihood that any gap is exploited.

Medium Operation

Windsurf model served via bring-your-own-key

BYO-key model usage bypasses central controls, raising the likelihood that abuse goes undetected.

Medium Security

Need a rule that isn't listed? Rencore's Policy Builder lets you create custom policies tailored to your organization.

Reports

3 analytics views and dashboards.

Windsurf credits consumed by member (last 30 days)

Top 10 members by credits consumed in the last 30 days.

Bar Chart · Costs

Windsurf weekly active users

Distinct active members per week over the last year.

Line Chart · Operation

Windsurf model mix; last 30 days

Distribution of requests across models in the last 30 days.

Donut Chart · Operation

Automations

2 automated remediation workflows.

Remove Windsurf Member

Automatically removes a member from the Windsurf team after approval

Revoke Windsurf Seat

Automatically revokes a Windsurf seat after approval

Segments

5 data groupings for targeted filtering.

Inactive Windsurf membersWindsurf team adminsExternal guest Windsurf membersHigh-credit Windsurf membersWindsurf BYO-key models

Frequently asked questions

Does Rencore support governance for AI tools beyond Microsoft Copilot?

Yes. Rencore connects to Claude, OpenAI, Gemini, GitHub Copilot, Cursor, Windsurf, AWS Bedrock, Azure AI Foundry, and other AI platforms. Each connector provides tailored policies for cost management, security, adoption tracking, and access control, giving IT a unified governance view across all AI tools the organization uses.

What is Rencore governance?

Rencore governance is a SaaS platform that continuously monitors your Microsoft 365 tenant for policy violations, configuration drift, and security risks across SharePoint, Teams, Power Platform, Copilot, and AI Agents. It automates compliance evidence collection, surfaces oversharing and sprawl, and provides actionable remediation workflows, reducing manual audit effort by up to 80%.

How do Rencore policies work?

Rencore ships with hundreds of pre-built policies that detect governance violations across every connector, oversharing, sprawl, cost overruns, security risks, and compliance gaps. Policies run on a continuous schedule, evaluate each discovered object against configurable rules, and flag violations with severity (High, Medium, Low), category, and a recommended action.