Privacy-first open-source VS Code agent with enterprise governance layer, backed by $32M in Series A and Seed funding (July 2025, led by Emergence Capital and Pace Capital). Differentiator: complete transparency (every file read, command run, token spent visible), BYOK model flexibility, and client-side architecture ensuring code never leaves the local environment.
Cline competes on openness and enterprise control rather than pure capability. It offers complete data sovereignty and model flexibility. The October 2025 Enterprise launch with SSO, RBAC, and audit trails addresses the governance gap that previously limited adoption. Samsung, SAP, Oracle, and Salesforce (Agentforce) have deployed Cline across tens of thousands of developers. The December 2025 LG CNS partnership for "AI-Native Development" (AIND) signals serious enterprise momentum.
Critical watch item: Four security vulnerabilities disclosed in August 2025 were only partially mitigated in v3.35.0. Vendor response was slow (35+ days) and fixes have not been independently verified. This governance gap prevents advancement to Adopted status despite strong enterprise traction.
Adoption & Proof Points
- $32M funding (July 2025): Series A + Seed led by Emergence Capital and Pace Capital, with 1984 Ventures, Essence VC, Cox Exponential, and angels including Jared Friedman, Logan Kilpatrick, Addy Osmani
- Fortune 500 deployments: Samsung (DX division beta, full rollout planned), SAP, Oracle deployed across tens of thousands of developers
- Salesforce: Agentforce Vibes built on Cline's open architecture
- LG CNS: Partnership (Dec 2025) for AIND enterprise agentic solution
- Community scale: 4+ million VS Code installs, 57k+ GitHub stars, 20k Discord members
- Growth: 4,704% GitHub growth (Octoverse 2025)—crowned fastest-growing AI open source project
- Team tier: Free through Q1 2026, then $20/user/month (first 10 seats always free). Enterprise pricing on request.
Recommended Use Cases
- Enterprise teams wanting open-source flexibility with governance controls and $32M-backed product roadmap
- Organizations with existing cloud contracts (Bedrock, Vertex, Azure) seeking BYOK model routing
- Developers prioritizing transparency and approval-based workflows
- Air-gapped and Zero Trust environments requiring local LLM support where cloud-based alternatives fail compliance review
- Teams building custom tooling via Cline CLI, MCP integrations, and Skills compatibility
Risks & Limitations
- CRITICAL SECURITY ADVISORY: Mindgard disclosed 4 critical vulnerabilities (Aug 2025): DNS-based API key exfiltration via ping commands, remote code execution through .clinerules override, TOCTOU race conditions, and model information leakage. Partial patch in v3.35.0 but vulnerabilities remained unaddressed for 90+ days per Mindgard; GitHub Issue #4640 confirms security reports ignored. Enterprise deployment not recommended without disabling auto-execution and implementing strict network segmentation.
- Security vulnerabilities: Four critical flaws (Aug 2025) only partially mitigated in v3.35.0. Mindgard documented 90+ day response time; GitHub Issue #4640 confirms security reports ignored. Governance score capped at 7 until complete remediation and independent verification.
- MCP risk: Treat MCP endpoints as untrusted, pin versions
- Rough edges: Can get stuck in loops, requires prompt crafting skill
- Not fire-and-forget: Human-in-the-loop by default, requires active guidance
- Benchmark gap: AIMultiple (Jan 2026) found Cline "showed deficiencies in detailed functional requirements" vs. Kiro in web component testing
Capabilities & Integration
Agentic depth: Deep Planning mode for codebase investigation, Focus Chain for persistent task tracking, Auto Compact for context summarization, YOLO mode for full autonomy. Plan → Act workflow separates investigation from execution. Background Edits (Dec 2025) allows editing without cursor interruption. Explain Changes provides inline AI explanations for code review.
Context handling: Memory Bank for persistent context across tasks, intelligent context management removing outdated file reads, Focus Chain reinjects todo lists every 6 messages to prevent drift.
Integration surface: VS Code extension (primary), Cline CLI for terminal-first workflows, JetBrains plugin (IntelliJ, PyCharm, WebStorm). MCP Marketplace (Feb 2025) provides extensible tool integrations. Skills compatibility (v3.48.0, Jan 2026) for Claude Code interoperability. Websearch tooling through Cline provider.
Model support: Claude Opus 4.5, Sonnet 4.5 (96.2% diff-edit success per telemetry), Gemini 3 Pro with thinking levels, GPT-5, Kimi K2, Grok 4.1. BYOK any model provider (Anthropic, OpenAI, Google, AWS Bedrock, Azure, Vertex, OpenRouter, local models via Ollama/LM Studio).
