The Best Cursor rules Alternative
Cursor rules are advice you write by hand. Watchman's guards are code that runs before the command does.
Cursor rules covers 4 of the 16 capabilities compared in full, and 1 in part. Every row is in the table on this page, sourced and checkable — we publish no benchmark we have not run.
How to read this page. The Watchman column is read from this project's own source. The competitor columns describe the shipping products as of September 2026, are the only claims here not read from our repository, and should be re-checked before you rely on them. If we have something wrong, tell us and we will correct it. Competitor claims last checked September 2026.
The six things the matrix says nobody else does
Every memory product will tell you it remembers. The question worth asking is what happens next — whether anything acts on what was remembered. These six are where Cursor rules and Watchman stop being the same category of tool.
— Blocks an agent on memory state, per subject.
— Audits the code it just wrote, and makes the coder answer.
— Decides routine approvals for you while you are away.
— Caches proven tool results so the same answer is never bought twice.
— A code graph of symbols and call edges, scoped per folder.
— Peer-to-peer team sync with no cloud data path.
A guard is compiled code, not prompt text an agent can reason its way around. That distinction is the whole reason the first row exists.
Counted from the comparison table below this chart — recount it yourself.
Nobody has to be in the loop
Most “autonomous” agent tooling means an agent that stops every four minutes to ask you a question. The default here is the opposite: it runs the loop and interrupts only for things that are genuinely irreversible.
Editor hooks record every session and every edit, so there is no “remember this” step to forget — which is the reason most memory tools quietly end up empty. The proxy answers routine approval requests from a brief you wrote. The auditor reads what the coder actually edited and puts a finding in its next turn as a conversation it has to answer. The recorder serves proven tool calls from the record instead of paying for them again.
Three things it will never decide for you, whatever the dial says: anything the Guard stopped, anything above the severity ceiling you set, and anything on a project with no brief. Autonomy is a dial on reversible work, never a bypass on work that cannot be undone.
What it costs at the margin
Recall runs against a local index. You are not billed to remember, and that single fact changes behaviour: teams that pay per query learn to query less, and a memory nobody searches is not a memory.
The proxy, the background jobs and the auditor run on the agent CLI you already pay for — your existing sign-in, no second bill. A decision is reviewed by a model exactly once and the flag is stored, so no restart or sync replay can spend a second call on the same card. Continuations and handoffs approve on a fast lane with no model call at all.
Set every model to off and it still works. Capture, filing, linking, the graph and search all keep running with nothing spent. That is the floor, and the floor is free.
| WATCHMAN | |
|---|---|
| Marginal cost per recall | £0 — a local index, you are not billed to remember |
| Setup effort | None — it installs and self-wires into every agent tool it finds |
| Ongoing effort | None — capture, filing, linking and handoffs are automatic |
| With every model set to off | Still captures, files, links, graphs and searches |
| Ecosystem maturity | Young — fewer people have hit your bug before. This is the real downside. |
What an agent can actually call
A memory you cannot reach from the tool you are in is a memory you will not use. The surface is deliberately wide, and the editor hooks mean most of it is never called by hand.
Counted from the crate in projectmd.md. Our numbers only — we have not counted the equivalents for other tools.
Watchman and Cursor rules, capability by capability
| CAPABILITY | WATCHMAN | CURSOR RULES |
|---|---|---|
| Blocks on memory state | Yes — per subject | No |
| Self-auditing code review | Yes — live, on save | No |
| Decides for you while you are away | Yes — the proxy | No |
| Caches proven tool results | Yes — the recorder | No |
| Code graph — symbols and call edges | Yes — folder-scoped | No |
| P2P team sync, no cloud data path | Yes | No |
| Org-wide memory you can drop files into | Yes | No |
| Automatic capture, no “remember this” | Yes — editor hooks | No |
| Runs fully offline | Yes | Yes |
| Data never leaves the machine | Yes | Yes |
| Works with the cloud down | Yes | Yes |
| MCP tools | Yes — 37 | No |
| Temporal knowledge graph | Yes | No |
| Multimodal embedding | Yes — image, video, doc | No |
| Per-project rule enforcement | Yes | Partial — advisory |
| Desktop app | Yes — desktop app | Yes |
Choose the right tool
Choose Watchman when
- You want a rule that stops a command, not one the model may talk itself past
- The rules should reach every agent on the machine, not one editor
- You would rather memory filled itself than maintain instructions by hand
- You want history and a code graph, not just a rules file
Choose Cursor rules when
- You work in one editor, want nothing installed, and a versioned instructions file is genuinely enough
- You want your project conventions reviewable in a pull request as plain text
- You have no interest in captured history — only in steering the model's style
Questions teams ask first
- Cursor rules are local and free too. What am I gaining?
- Cursor rules score well on exactly the rows about locality — offline, data on your machine, works with the cloud down — and the matrix marks all three yes. What they do not do is remember anything, or enforce anything. A rule is text the model reads and may reason past; a guard is compiled code in the tool call path. The matrix marks Cursor's rule enforcement as advisory for that reason.
- What is the ongoing effort difference?
- Rules are hand-written and go stale unless someone maintains them — the matrix marks that as the highest ongoing effort of anything compared. Capture, filing, linking and handoffs here are automatic, so the intended ongoing effort is none.
- Is the data really local?
- The engine is an executable on your disk and a single redb file. Nothing leaves the machine unless you send it to a teammate, and that goes to them encrypted rather than through anyone's inference API. There is no network hop in the data path, which is also why it works on a plane, on hotel wifi, and during someone else's outage.
- What is the honest downside?
- The ecosystem is young. There are fewer people who have hit your bug before, fewer blog posts when something goes wrong, and fewer integrations written by strangers. That is the real cost, and it is the last row of every table on this page.
- Do I have to stop using what I have?
- No. Capture installs into every agent tool it finds on the machine, so switching agents does not restart your history. If you already keep memory somewhere else, running both costs you nothing but disk.
- How much work is it to keep going?
- None by design. Indexing, the code graph, the auditor and peer sync are background work on a schedule. A memory tool with a “save this” button ends up empty, because the moment worth saving is never the moment you think to press it.
- How were these comparisons put together?
- The Watchman column is read from this project's own source. The competitor columns describe the shipping products as of September 2026, are the only claims here not read from our repository, and should be re-checked before you rely on them. If we have something wrong, tell us and we will correct it.
Install it and stop remembering things yourself
Local, free at the margin, and it fills itself while you work.
START FREE TRIAL