At a Glance
| Vendor | Codeium |
|---|---|
| Category | Coding Assistant |
| Default Risk Rating | Medium |
| Default Status for New Clients | Unapproved |
| Recognized By | Domain: codeium.com, windsurf.com, server.codeium.com |
| Desktop App Inventoried | macOS, Windows |
The risk rating and default status are ProctoredAI's starting points for a new client. Each partner sets the status per client.
What to Know About Windsurf / Codeium
Agentic IDE, now installed as "Devin" (DevinUserSetup, %LOCALAPPDATA%\Programs\Devin) after Cognition's rebrand; verified on Windows 2026-10-18. Its traffic goes to codeium.com, windsurf.com and app.devin.ai, all routed through the agent.
Why Coding Assistant Tools Need Governing
Coding assistants read source code and often the secrets in it: API keys, connection strings and customer data in test fixtures.
Approve the assistants the client licenses, block credentials and secrets everywhere, and review the MCP servers developers connect them to.
How ProctoredAI Governs Windsurf / Codeium
- See it. The agent reports every device and account using Windsurf / Codeium, and finds the installed desktop app on macOS and Windows.
- Decide it. Mark it Approved, Unapproved or Blocked for each client. Unapproved use can ask the person for a business reason first.
- Protect what is sent. Prompts and uploads are inspected on the device, and credentials, health and payment data and sensitive documents are stopped, redacted or warned on by the client's rules.
- Prove it. Usage, decisions and blocked events land in the client's monthly report as evidence.
Policy Packs That Fit
- Credentials & Secrets. Block API keys, private keys, passwords and connection strings everywhere.
- Prompt Injection & Jailbreaks. Block prompts that try to override the model's instructions or extract its system prompt, and uploaded content that carries hidden directives for the AI.