Windsurf
Codeium's AI-first fork. Installs from Open VSX; everything works.
Windsurf is a desktop VS Code fork with a local extension host, so all features are available.
Install
Windsurf uses Open VSX. Open the Extensions view, search Vulnetix, and install.
To sideload instead, download the .vsix from Open VSX and use Command Palette → Extensions: Install from VSIX.
Worth knowing
Cascade edits are scanned like any other edit. When Cascade writes across several files, each one is checked as it is written, so an insecure pattern shows up while you are still reviewing the change rather than in CI afterwards.
No model quota is consumed. Scanning is local rule evaluation, not inference.
Extension IDs are the same. Anything documented as vulnetix.vulnetix works unchanged, including windsurf --install-extension vulnetix.vulnetix if your build ships that CLI.
Also worth having
vulnetix skills install
installs Vulnetix agent skills into ~/.windsurf alongside the other assistant directories, giving Cascade direct access to vulnerability lookups and triage.