Electron audit: Claude passes 6/6 hardening fuses, Cursor 0/6, Postman 1/6
A developer audited Electron fuses in three macOS apps: Claude 3.1623.0 enabled all six checked hardening switches, Postman 11.93.0 enabled one, and Cursor 3.1.15 enabled none. Open fuses let other code run under the app's identity and inherit its permissions and signed-in sessions.
- Claude 3.1623.0 passed 6/6 checks, including cookie encryption and ASAR integrity validation
- Cursor 3.1.15 left all six fuses permissive, including RunAsNode and --inspect
- Postman 11.93.0 blocked only --inspect, leaving the other five settings open
- The audit used the read-only REA tool via Claude Code on macOS 15.1
Read next
Security