Technology & Software Engineering Top 100 / #43ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol

Coding agent · Apache-2.0 · GitHub; VS Code

Cline

Popular open-source IDE coding agent with tool use and MCP ecosystem. Publisher: Cline. Also ranked in Supply Chain, Manufacturing & Logistics (#66), Sales, Marketing & Customer Experience (#72), Cybersecurity (#76).

Vendor page ↗+ CompareExport JSON

Trust profileas of 2026-10-26

Publisherlikely · Repository ownership or inferred publisher domain — repository or Hub account ownershiplikely

Complianceno evidence foundT5

SecurityNo CVE linked to this agent in the CVE registry — none linked in the products checked, not a findingnone

ProtocolsModel Context Protocol (MCP) claimed — named in the resource's own description; no endpoint at the publisher's well-known paths sourceAgent2Agent (A2A) probed, not foundAgentic Resource Discovery (ARD) probed, not found1 / 3

TracesNone found — nobody has published what this agent does under attacknone

Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only

Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe Cline, not this agent specifically.

Traces — under attack, in defence, in incidents

none public · what a trace is

No public trace found. Nobody has published what Cline does when its inputs carry instructions it should not follow, when a tool asks for credentials, or when a task invites a destructive command. Defenders can't learn from what they can't see: run it in a sandbox before the pilot and keep the transcript, or ask the vendor to publish one.

● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.

CVEs — on the official record

none linked · the registry

No CVE in the registry names this agent or its listed product. That reads "none linked in the products checked", never as a finding: a product that is not on the registry's list, or a record that names it differently, is not seen. The vendor's own advisories remain the source of truth.

Compliance evidence

4 frameworks shown

–

SOC 2

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 27001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 42001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

CSA STAR

T5 Unknown

Nothing found in the sources checked.

Scope: — · CSA STAR Registry

ask the vendor

"Unknown" means nothing was found in the sources checked — registries, marketplaces and the vendor's own pages. It is not a finding of non-compliance; ask the vendor.

✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier

GDPR, assembled from checks

GDPR● 0 found in registries or documents○ 0 vendor-claimed⚠ 0 issues linkedas of 2026-10-26

– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.

☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.

News and chatter

last 90 days · linked with confidence ≥ 0.85

2026-10-26

cline release v4.1.26

GitHub releases · ### Added - Cloud tasks: Settings > API Configuration has a Local | Cloud toggle when cloud sessions are on. Cloud picks the Cline model new cloud tasks run on, saved separately from your local models. Clicking the model label in a cloud

Product update

2026-10-26

cline: Desktop v0.0.49

GitHub releases · - A new **Changes** button in the session header shows the session's line counts and opens a pane listing the files changed in the last turn or across the whole session, with a diff of each. When a turn finishes, a summary under it lists t

Product update

Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.

Technology & Software Engineering score

technology profile · sar-score-2.0 · #43 of 100 in the curated list

Adoption / usage27 / 30

Trust & security17 / 25

Project / product health20 / 20

Ecosystem / interoperability15 / 15

Domain expertise / fit35 / 100

Governance / compliance evidenceunknown

Docs / transparency9 / 10

Raw component / maximum, then weighted by the technology profile (adoption 30, trust 20, project 20, ecosystem 15, domain 10, governance 0, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.

Before you deploy

Deployment questions answered from the vendor's documentation, each with its source.

✔Reads private repositories? Yes — Works on the open workspace; "Read project files" is the recommended first auto-approve toggle source

◐Executes code or writes changes? Configurable — "Auto Approve is evaluated per tool call"; recommended setup: "Leave edits, commands, browser, and MCP off until you have a specific reason" source

?Credential handling documented? Not documented — Not covered on the pages checked source

✔Can run entirely on your own machine or infrastructure? Yes — Editor extension running on your machine; model requests go to the provider you configure source

✔Human approval before consequential actions? Yes — Each tool call prompts unless its auto-approve toggle is on; "YOLO mode" removes prompts and is documented as a deliberate choice source

Evidence supporting this use (4)

Reads private repositories: yes — Works on the open workspace; "Read project files" is the recommended first auto-approve toggle source

Executes code or writes changes: configurable — "Auto Approve is evaluated per tool call"; recommended setup: "Leave edits, commands, browser, and MCP off until you have a specific reason" source

Can run entirely on your own machine or infrastructure: yes — Editor extension running on your machine; model requests go to the provider you configure source

Human approval before consequential actions: yes — Each tool call prompts unless its auto-approve toggle is on; "YOLO mode" removes prompts and is documented as a deliberate choice source

Unknowns to check (3)

Credential handling documented: not documented — Not covered on the pages checked. Ask the vendor. source

Your lawful basis and DPIA for PHI and personal data the agent will touch

Ask the vendor for SOC 2, ISO 27001, ISO 42001, CSA STAR evidence; none was found in the sources checked

Suggested restrictions for a pilot (3)

Pilot with scoped, short-lived tokens only; keep production secrets out of the agent's environment.

Ask for the SOC 2 report under NDA before the pilot touches customer data; none was found in the sources checked.

No public trace of this agent under adversarial input was found. Run it in a sandbox against your own prompt-injection and tool-abuse scenarios before the pilot, and keep the transcript; the enterprise edition records one.

See the worked comparison: Three ways to let a coding agent into a private repository →

Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.

Provenance

seed workbookscores, rank, category

Hacker News, GDELT, vendor feedsnews and chatter

First seen2026-10-26

Recordres_e2b06a32b809f35d

Open the full record (JSON) →