Integration Guide

Enterprise Security for Windsurf Flows

Windsurf agentic flows send deep codebase context to AI models. Pretense ensures sensitive identifiers are mutated before any cloud transmission.

under 10msadded latency

Local-firstnothing leaves your machine

5 minsetup time

Byte-exactreversal guaranteed

How to Protect Windsurf IDE in 3 Steps

One environment variable. No code changes. No workflow disruption.

Install Pretense globally and run pretense init to scan your project for sensitive identifiers.

Set the AI API base URL to http://localhost:9339 in Windsurf preferences.

Windsurf Cascade flows now route through Pretense. No proprietary code reaches Codeium servers.

Pretense transforms your real identifiers into synthetic tokens before transmission. The LLM sees structure and logic, not your proprietary names.

Without Pretense: raw identifiers exposed

// Before Pretense mutation
async function getUserPaymentToken(userId: string) {
  return await stripeClient.createToken(userId, STRIPE_SECRET);
}

Your function names, secrets, and architecture are transmitted verbatim.

With Pretense: synthetic identifiers only

// After Pretense mutation (what the LLM sees)
async function _fn4a2b(_v8c3d: string) {
  return await _v2f1a._fn9e4b(_v8c3d, _v7d2c);
}

Structure intact. LLM quality preserved. Your IP stays private.

After the LLM responds, Pretense reverses every mutation. You receive real, working code with your original identifiers restored byte-for-byte.

terminal

$ npm install -g pretense && pretense start

$ pretense init

$ pretense start

NOTE

Configure Windsurf API endpoint in settings to point to localhost:9339

Does Pretense protect Windsurf Cascade flows?

Yes. Pretense intercepts all HTTP requests from Windsurf to AI APIs, including multi-step Cascade flows.

What about Windsurf autocomplete?

Autocomplete uses the same API layer. All inline suggestions are protected by Pretense mutation.

Is Pretense certified for enterprise Windsurf use?

Pretense produces SOC2/HIPAA/GDPR compliance reports exportable as PDF or JSON for enterprise audits.

No code changes. No workflow disruption. One environment variable and Pretense intercepts every request.

No credit card required. 30-second setup. Local-first, nothing leaves your machine.