{ "data": { "a": { "slug": "deeptutor", "name": "DeepTutor", "vendor": "HKUDS", "vendorUrl": "https://deeptutor.info", "kind": "harness", "category": "personal-assistants", "summary": "DeepTutor is an open-source, self-hosted learning workspace from HKUDS for tutoring, quizzes, research reports and knowledge bases, with persistent memory and optional multiple users. It runs as a web app, and a `deeptutor` CLI emits NDJSON for other agents.", "url": "https://www.anchorterminal.com/tools/deeptutor", "markdownUrl": "https://www.anchorterminal.com/tools/deeptutor.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deeptutor.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deeptutor.json", "repo": "https://github.com/HKUDS/DeepTutor", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "deeptutor" }, { "registry": "pypi", "name": "deeptutor-cli" } ], "auth": "none", "authNotes": "No account with the project. The owner adds model provider keys in Settings or through `deeptutor config apply` with `api_key_env` naming an environment variable, or signs in to OpenAI Codex (OAuth), GitHub Copilot (device login) or CodeBuddy. Web sign-in is off by default; with `auth.json` enabled the first registered user becomes admin and grants models, knowledge bases, skills, tools and MCP access to other users (https://github.com/HKUDS/DeepTutor/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the Apache 2.0 licence, and the README says the project has no paid online products. The owner pays the chosen model, embedding and search providers, or nothing with a local model through Ollama, LM Studio, llama.cpp, vLLM or Lemonade. The README carries a PageIndex discount code and an API Route provider preset, both third parties (checked 2026-10-30).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, SKILL.md or the developer handbook (checked 2026-10-30).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 51497, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-30" }, "docsUrl": "https://deeptutor.info/", "capabilities": [ "assistant.memory", "assistant.self-hosted", "assistant.messaging", "agent.mcp-client", "knowledge.search", "search.research", "memory.user", "document.write" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "apache-2.0", "cli", "harness", "docker", "mcp-client", "rag", "no-card" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 62.7, "grade": "B", "agentReady": false, "rank": 494, "ranked": true, "rankOf": 1239, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 84, "payments": 60, "reliability": 78, "schema": 71, "security": 51, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-30" }, "negative": -3, "negativeNotes": [ "2026-09-30. CVE-2026-51870 (critical on NVD). Command execution through the TutorBot shell tool's `ExecTool.execute` in v1.4.0, reported in issue #506. v1.4.1 of 27 May 2026 lists it closed with a shell RCE (#518), a filesystem path traversal (#517) and three authorisation bypasses (#514 to #516), and makes shell exec opt-in. Fixed within five days and documented in release notes, -2. https://nvd.nist.gov/vuln/detail/CVE-2026-51870", "2026-06-30. GHSA-jg88-rvpc-qvxj (CVE-2026-58168, high). Before 1.4.10, a user grant without `mcp_tools` let non-admin users in multi-user mode invoke every configured MCP tool. Single-user installs were unaffected. Fixed in 1.4.10 of 21 June 2026 with deny-by-default MCP access, -1. https://api.osv.dev/v1/vulns/GHSA-jg88-rvpc-qvxj" ], "verdict": "DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.", "bestFor": "A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.", "strengths": [ "Apache 2.0, self-hosted, and the README says the project sells nothing", "`deeptutor run ... --format json` streams NDJSON tagged with `session_id`, and `--session` chains turns headlessly", "SKILL.md and AGENT_SETUP.md give an agent a non-interactive setup path with `config apply --check` and `doctor --format json`", "Releases every few days with dated notes and upgrade steps, 27 in the 90 days to 30 October 2026", "Inspectable file-backed memory with an append-only L1 trace, and grants, audit records and per-user isolation in multi-user mode" ], "weaknesses": [ "The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials", "No SECURITY.md, no private reporting route and no repository-published advisories, while two CVEs were assigned in 2026", "The `exec` sandbox falls back to a best-effort restricted subprocess by default when no runner or bubblewrap is present", "Nightly test runs on main failed every night from 20 to 28 October 2026 before passing again on 29 and 30 October", "Provider keys are stored in plain JSON under `data/user/settings/`" ], "agentNotes": [ "Run `deeptutor run \u003ccapability\u003e \"...\" --format json` and read the `done` event's `session_id`; pass `--session` to continue the same session", "Configure with `deeptutor config apply setup.json --check` first, naming keys through `api_key_env`; literal keys are rejected", "Before exposing it beyond one machine, enable sign-in in `auth.json`, set exact `cors_origins` and set `BACKEND_HOST=127.0.0.1` where loopback is wanted", "Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)", "Set `sandbox_allow_subprocess` to false where generated code must run only in the runner sidecar or bubblewrap" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.7 } ], "editorialScores": { "ergonomics": 63, "maintenance": 84, "payments": 60, "reliability": 78, "schema": 71, "security": 51, "transparency": 65 }, "provenanceScore": 39, "checked": { "categories": { "ergonomics": "2026-10-30", "maintenance": "2026-10-30", "payments": "2026-10-30", "reliability": "2026-10-30", "schema": "2026-10-30", "security": "2026-10-30", "transparency": "2026-10-30" }, "last": "2026-10-30", "oldest": "2026-10-30", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install -U \"deeptutor[full]\" # then: deeptutor init \u0026\u0026 deeptutor start # or: docker run --rm -p 127.0.0.1:3782:3782 -v deeptutor-data:/app/data ghcr.io/hkuds/deeptutor:latest", "headless": { "command": "deeptutor run chat \"$TASK\" --format json" } }, "letme": { "capability": "https://letme.dev/assistant.memory", "tool": "https://letme.dev/deeptutor" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "deeptutor.info", "domainRegistered": "2026-05-20", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/DeepTutor/releases", "securityTxt": "unknown", "checked": "2026-10-30", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, the Data Intelligence Lab at the University of Hong Kong, and the README says the project is led by Bingxi Zhao within the HKUDS group.", "deeptutor.info's robots.txt disallows ClaudeBot, Claude-Web and anthropic-ai, so its pages were not read. Its terms, privacy page and security.txt are unknown.", "No SECURITY.md was found in the repository tree on 30 October 2026.", "RDAP gives a registration date of 20 May 2026 for deeptutor.info. The README dates the docs site's launch to 22 May 2026.", "There is no hosted endpoint. The API answers on the owner's own host." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deeptutor.json" }, "answer": "nanobot and DeepTutor score within a point of each other on agent readiness, 63 (B) and 62.7 (B). DeepTutor leads on reliability.", "b": { "slug": "nanobot", "name": "nanobot", "vendor": "HKUDS", "vendorUrl": "https://nanobot.wiki", "kind": "harness", "category": "personal-assistants", "summary": "nanobot is an open-source, self-hosted personal AI agent written in Python by HKUDS. It runs as a gateway on the owner's machine and answers in a web UI, a terminal and chat apps, with tools, memory and scheduled automations.", "url": "https://www.anchorterminal.com/tools/nanobot", "markdownUrl": "https://www.anchorterminal.com/tools/nanobot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/nanobot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/nanobot.json", "repo": "https://github.com/HKUDS/nanobot", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "nanobot-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies model provider keys or an OAuth sign-in, and bot tokens or mailbox passwords for each channel, in `~/.nanobot/config.json`. The WebUI on localhost needs no password, and binding to all interfaces requires a token.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model. The optional Render deployment needs a paid Render service.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 49000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://nanobot.wiki/docs/latest/getting-started/nanobot-overview", "llmsTxt": "https://nanobot.wiki/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker", "alpha" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 63, "grade": "B", "agentReady": false, "rank": 483, "ranked": true, "rankOf": 1239, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 54 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-09-02. GHSA-vc5v-6vwm-wf9m (critical, 9.3, no CVE). Web fetch did not block internal addresses, so cloud metadata and internal services could be read without authentication in versions before 0.3.0. Fixed in 0.3.0 of 25 July and published, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m", "2026-03-27. GHSA-4gmr-2vc8-7qh3 (CVE-2026-33654, high). A spoofed email could inject instructions through email polling with no user action, up to command execution, in 0.1.4.post5 and earlier. Fixed in 0.1.4.post6 and published, more than six months ago, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-4gmr-2vc8-7qh3", "2026-03-11. GHSA-g6cf-xjwr-pm77 (CVE-2026-31977, critical, 9.0). A sender ID containing `|` passed the `allowFrom` check in versions before 0.1.4.post4. Fixed and published, more than six months ago, -1. https://github.com/HKUDS/nanobot/security/advisories/GHSA-g6cf-xjwr-pm77", "2026-04-14 and 2026-05-24. GHSA-v5j3-4q66-58cf (CVE-2026-35589, high, 8.0), cross-site WebSocket hijacking of the WhatsApp bridge, fixed in 0.1.5, and GHSA-3f63-vcp3-hvqr (CVE-2026-48716, high, 8.7), file write through a WhatsApp document name. Both fixed and published, -1 together. https://github.com/HKUDS/nanobot/security/advisories" ], "verdict": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.3.5", "Long-term memory is plain files (`USER.md`, `SOUL.md`, `memory/MEMORY.md`) versioned with Git, with `/dream-log` and `/dream-restore` to inspect and roll back", "Chat channels deny unknown senders by default since v0.1.4.post4, with pairing codes the owner approves", "Email requires SPF and DKIM results from a named receiving service since v0.3.5, and mailbox access stays off until `consentGranted` is set", "Optional `bwrap` (Linux) and `seatbelt` (macOS) sandboxes for shell commands, and an SSRF guard on web fetches and HTTP MCP connections" ], "weaknesses": [ "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking", "`tools.restrictToWorkspace` defaults to false and `tools.exec.sandbox` to empty. Neither sandbox restricts network access, and Windows has none", "Five advisories published from 11 March to 2 September 2026, two rated critical, among them an allowlist bypass and unauthenticated SSRF in web fetch", "SECURITY.md lists plain-text API keys in `config.json`, no rate limiting and limited security event logging as known limitations", "Version 0.3.5 with an Alpha classifier, 214 open issues and 614 open pull requests on 12 October 2026" ], "agentNotes": [ "Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default", "Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)", "Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing", "Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text", "Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63 } ], "editorialScores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 69 }, "provenanceScore": 39, "checked": { "categories": { "ergonomics": "2026-10-12", "maintenance": "2026-10-12", "payments": "2026-10-12", "reliability": "2026-10-12", "schema": "2026-10-12", "security": "2026-10-12", "transparency": "2026-10-12" }, "last": "2026-10-12", "lastMoved": "2026-10-28", "oldest": "2026-10-12", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "python -m pip install nanobot-ai # or: uv tool install nanobot-ai # then: nanobot webui", "headless": { "command": "nanobot -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/nanobot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "nanobot.wiki", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/nanobot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, which a published advisory title calls the Hong Kong University Data Intelligence Lab. pyproject.toml names Xubin Ren and the nanobot contributors as authors.", "nanobot.wiki has no terms or privacy page linked from its home page or llms.txt, and `/.well-known/security.txt` answered with the site's not-found page on 12 October 2026.", "SECURITY.md in the repository asks for reports through a private GitHub advisory or by email and aims to respond within 48 hours.", "There is no hosted endpoint. A gateway answers on its owner's own host." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/nanobot.json", "live": { "slug": "nanobot", "versions": [ { "registry": "github", "name": "HKUDS/nanobot", "version": "v0.4.0", "released": "2026-10-28", "seenAt": "2026-10-30T14:30:52.791114257Z" }, { "registry": "pypi", "name": "nanobot-ai", "version": "0.4.0", "released": "2026-10-28", "seenAt": "2026-10-30T14:30:52.678796813Z" } ], "githubStars": 49676, "pypiWeekly": 18002, "securityTxt": { "url": "https://nanobot.wiki/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-30T15:38:50.619828306Z" }, "llmsTxt": { "url": "https://nanobot.wiki/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-30T15:08:10.426226137Z" }, "domain": { "domain": "nanobot.wiki", "registered": "2026-03-31", "source": "https://rdap.nic.wiki/domain/nanobot.wiki", "checkedAt": "2026-10-25T13:56:13.32227892Z" }, "github": { "repo": "hkuds/nanobot", "checkedAt": "2026-10-26T07:33:57.056306741Z", "stars": 49357, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T07:23:55Z", "openIssues": 209, "openPRs": 657, "issuesOpened90d": 171, "issuesClosed90d": 142, "prsMerged90d": 769, "ci": { "branch": "main", "runs": 50, "success": 38, "failure": 12, "other": 0, "latest": "success", "latestAt": "2026-10-26T07:32:15Z" }, "advisories": [ { "ghsa": "GHSA-vc5v-6vwm-wf9m", "severity": "critical", "published": "2026-09-02T02:03:45Z" }, { "ghsa": "GHSA-3f63-vcp3-hvqr", "cve": "CVE-2026-48716", "severity": "high", "published": "2026-05-24T16:08:58Z" }, { "ghsa": "GHSA-v5j3-4q66-58cf", "cve": "CVE-2026-35589", "severity": "high", "published": "2026-04-14T20:00:28Z" }, { "ghsa": "GHSA-4gmr-2vc8-7qh3", "cve": "CVE-2026-33654", "severity": "high", "published": "2026-03-27T15:13:47Z" }, { "ghsa": "GHSA-g6cf-xjwr-pm77", "cve": "CVE-2026-31977", "severity": "critical", "published": "2026-03-11T07:02:19Z" } ], "replies": { "sampled": 25, "unanswered": 9, "medianDays": 1.6 } }, "updatedAt": "2026-10-30T15:38:50.619828306Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "HKUDS", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-28", "b": "2026-09-15", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "51k stars", "b": "49k stars", "name": "Popularity" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "nanobot and DeepTutor score within a point of each other on agent readiness, 63 (B) and 62.7 (B). DeepTutor leads on reliability.", "question": "Which is better for AI agents, DeepTutor or nanobot?" }, { "answer": "Yes. DeepTutor is open source (Apache-2.0). nanobot is open source (MIT).", "question": "Are DeepTutor and nanobot open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 78 against 70" ], "also": [ "Free to start without a card" ], "goodFor": "A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.", "slug": "deeptutor", "watchFor": "The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials" }, { "aheadOn": [ "Schema \u0026 documentation, 77 against 71", "Agent ergonomics, 74 against 63", "Security \u0026 auth, 63 against 51" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "slug": "nanobot", "watchFor": "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking" } ], "job": { "capability": "assistant.memory", "name": "Assistants that remember you" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asaply-vs-deeptutor.json", "title": "asaply vs DeepTutor", "url": "https://www.anchorterminal.com/compare/asaply-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/asaply-vs-nanobot.json", "title": "asaply vs nanobot", "url": "https://www.anchorterminal.com/compare/asaply-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/asmi-vs-deeptutor.json", "title": "Asmi vs DeepTutor", "url": "https://www.anchorterminal.com/compare/asmi-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/asmi-vs-nanobot.json", "title": "Asmi vs nanobot", "url": "https://www.anchorterminal.com/compare/asmi-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-deeptutor.json", "title": "AstrBot vs DeepTutor", "url": "https://www.anchorterminal.com/compare/astrbot-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/boba-vs-deeptutor.json", "title": "Boba vs DeepTutor", "url": "https://www.anchorterminal.com/compare/boba-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/boba-vs-nanobot.json", "title": "Boba vs nanobot", "url": "https://www.anchorterminal.com/compare/boba-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/brea-vs-deeptutor.json", "title": "Brea vs DeepTutor", "url": "https://www.anchorterminal.com/compare/brea-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/brea-vs-nanobot.json", "title": "Brea vs nanobot", "url": "https://www.anchorterminal.com/compare/brea-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/del-vs-nanobot.json", "title": "Del vs nanobot", "url": "https://www.anchorterminal.com/compare/del-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hirealpha-vs-nanobot.json", "title": "HireAlpha vs nanobot", "url": "https://www.anchorterminal.com/compare/hirealpha-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openinstinct.json", "title": "nanobot vs OpenInstinct", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openinstinct" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-orbits.json", "title": "nanobot vs Orbits", "url": "https://www.anchorterminal.com/compare/nanobot-vs-orbits" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-orchid-ai.json", "title": "nanobot vs Orchid", "url": "https://www.anchorterminal.com/compare/nanobot-vs-orchid-ai" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-szn.json", "title": "nanobot vs szn", "url": "https://www.anchorterminal.com/compare/nanobot-vs-szn" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-tab-bot.json", "title": "nanobot vs Tab", "url": "https://www.anchorterminal.com/compare/nanobot-vs-tab-bot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zapia.json", "title": "nanobot vs Zapia", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zapia" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/boski-vs-nanobot.json", "title": "Boski vs nanobot", "url": "https://www.anchorterminal.com/compare/boski-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/caddy-app-vs-nanobot.json", "title": "Caddy vs nanobot", "url": "https://www.anchorterminal.com/compare/caddy-app-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/claude-duet-vs-nanobot.json", "title": "Claude Duet vs nanobot", "url": "https://www.anchorterminal.com/compare/claude-duet-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot.json", "title": "CowAgent vs nanobot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/folk-nozomio-vs-nanobot.json", "title": "folk vs nanobot", "url": "https://www.anchorterminal.com/compare/folk-nozomio-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.json", "title": "GAIA vs nanobot", "url": "https://www.anchorterminal.com/compare/gaia-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.json", "title": "Gemini Spark vs nanobot", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.json", "title": "Grok Bot vs nanobot", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-nanobot.json", "title": "Haven vs nanobot", "url": "https://www.anchorterminal.com/compare/haven-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-nanobot.json", "title": "Instinct vs nanobot", "url": "https://www.anchorterminal.com/compare/instinct-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.json", "title": "IronClaw vs nanobot", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "title": "Leon vs nanobot", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-nanobot.json", "title": "Lindy vs nanobot", "url": "https://www.anchorterminal.com/compare/lindy-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.json", "title": "nanobot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.json", "title": "nanobot vs Dots", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openduet.json", "title": "nanobot vs OpenDuet", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openduet" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-poke.json", "title": "nanobot vs Poke", "url": "https://www.anchorterminal.com/compare/nanobot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-tasker-ai.json", "title": "nanobot vs Tasker AI", "url": "https://www.anchorterminal.com/compare/nanobot-vs-tasker-ai" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-town.json", "title": "nanobot vs Town", "url": "https://www.anchorterminal.com/compare/nanobot-vs-town" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.json", "title": "nanobot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/atticus-vs-deeptutor.json", "title": "Atticus vs DeepTutor", "url": "https://www.anchorterminal.com/compare/atticus-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/atticus-vs-nanobot.json", "title": "Atticus vs nanobot", "url": "https://www.anchorterminal.com/compare/atticus-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/boski-vs-deeptutor.json", "title": "Boski vs DeepTutor", "url": "https://www.anchorterminal.com/compare/boski-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor.json", "title": "Caddy vs DeepTutor", "url": "https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor.json", "title": "Claude Duet vs DeepTutor", "url": "https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-deeptutor.json", "title": "CowAgent vs DeepTutor", "url": "https://www.anchorterminal.com/compare/cowagent-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-del.json", "title": "DeepTutor vs Del", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-del" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio.json", "title": "DeepTutor vs folk", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-gaia.json", "title": "DeepTutor vs GAIA", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark.json", "title": "DeepTutor vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot.json", "title": "DeepTutor vs Grok Bot", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro.json", "title": "DeepTutor vs Hark Pro", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-haven.json", "title": "DeepTutor vs Haven", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent.json", "title": "DeepTutor vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha.json", "title": "DeepTutor vs HireAlpha", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-instinct.json", "title": "DeepTutor vs Instinct", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw.json", "title": "DeepTutor vs IronClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-learnharness.json", "title": "DeepTutor vs LearnHarness", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-learnharness" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-leon.json", "title": "DeepTutor vs Leon", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-lindy.json", "title": "DeepTutor vs Lindy", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os.json", "title": "DeepTutor vs Lobby", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw.json", "title": "DeepTutor vs NanoClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-natura.json", "title": "DeepTutor vs Natura tinyNature", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-natura" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots.json", "title": "DeepTutor vs Dots", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openclaw.json", "title": "DeepTutor vs OpenClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openduet.json", "title": "DeepTutor vs OpenDuet", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openduet" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct.json", "title": "DeepTutor vs OpenInstinct", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-orbits.json", "title": "DeepTutor vs Orbits", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-orbits" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai.json", "title": "DeepTutor vs Orchid", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-pally.json", "title": "DeepTutor vs Pally", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-pally" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw.json", "title": "DeepTutor vs PicoClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-poke.json", "title": "DeepTutor vs Poke", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.json", "title": "DeepTutor vs QwenPaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-szn.json", "title": "DeepTutor vs szn", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-szn" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot.json", "title": "DeepTutor vs Tab", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-talorys.json", "title": "DeepTutor vs Talorys", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai.json", "title": "DeepTutor vs Tasker AI", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tomo.json", "title": "DeepTutor vs Tomo", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-town.json", "title": "DeepTutor vs Town", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-town" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-wajo.json", "title": "DeepTutor vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zapia.json", "title": "DeepTutor vs Zapia", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zapia" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw.json", "title": "DeepTutor vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer.json", "title": "DeepTutor vs Zo Computer", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/hark-pro-vs-nanobot.json", "title": "Hark Pro vs nanobot", "url": "https://www.anchorterminal.com/compare/hark-pro-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/learnharness-vs-nanobot.json", "title": "LearnHarness vs nanobot", "url": "https://www.anchorterminal.com/compare/learnharness-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-talorys.json", "title": "nanobot vs Talorys", "url": "https://www.anchorterminal.com/compare/nanobot-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/lobby-os-vs-nanobot.json", "title": "Lobby vs nanobot", "url": "https://www.anchorterminal.com/compare/lobby-os-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-natura.json", "title": "nanobot vs Natura tinyNature", "url": "https://www.anchorterminal.com/compare/nanobot-vs-natura" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-pally.json", "title": "nanobot vs Pally", "url": "https://www.anchorterminal.com/compare/nanobot-vs-pally" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-tomo.json", "title": "nanobot vs Tomo", "url": "https://www.anchorterminal.com/compare/nanobot-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-wajo.json", "title": "nanobot vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/nanobot-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor.json", "title": "AI Job Search vs DeepTutor", "url": "https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor" } ], "scores": [ { "by": 8, "deeptutor": 78, "edge": "deeptutor", "key": "reliability", "name": "Reliability", "nanobot": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "deeptutor": 71, "edge": "nanobot", "key": "schema", "name": "Schema \u0026 documentation", "nanobot": 77, "weight": 13 }, { "by": 11, "deeptutor": 63, "edge": "nanobot", "key": "ergonomics", "name": "Agent ergonomics", "nanobot": 74, "weight": 13 }, { "by": 12, "deeptutor": 51, "edge": "nanobot", "key": "security", "name": "Security \u0026 auth", "nanobot": 63, "weight": 14 }, { "by": 0, "deeptutor": 60, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "nanobot": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "deeptutor": 84, "edge": "deeptutor", "key": "maintenance", "name": "Maintenance \u0026 community", "nanobot": 82, "weight": 7 }, { "by": 2, "deeptutor": 52, "edge": "nanobot", "key": "transparency", "name": "Transparency \u0026 trust", "nanobot": 54, "weight": 7 } ], "summary": "nanobot and DeepTutor score within a point of each other on agent readiness, 63 (B) and 62.7 (B). DeepTutor leads on reliability. Both do assistants that remember you.", "tutorials": [], "verdicts": { "deeptutor": "DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.", "nanobot": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot", "json": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.min.md" }, "markdown": "nanobot and DeepTutor score within a point of each other on agent readiness, 63 (B) and 62.7 (B). DeepTutor leads on reliability. Both do assistants that remember you.\n\n- DeepTutor: grade B, 62.7/100, rank #494 of 1239. Markdown https://www.anchorterminal.com/tools/deeptutor.md · JSON https://www.anchorterminal.com/api/v1/tools/deeptutor.json\n- nanobot: grade B, 63/100, rank #483 of 1239. Markdown https://www.anchorterminal.com/tools/nanobot.md · JSON https://www.anchorterminal.com/api/v1/tools/nanobot.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 1196 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### DeepTutor (B)\n\nGood for: A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.\n\nAhead on:\n- Reliability, 78 against 70\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials\n\n### nanobot (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.\n\nAhead on:\n- Schema \u0026 documentation, 77 against 71\n- Agent ergonomics, 74 against 63\n- Security \u0026 auth, 63 against 51\n\nWatch for: No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking\n\n\n## Score by category\n\n| Category | Weight | DeepTutor | nanobot | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 78 | 70 | DeepTutor +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 77 | nanobot +6 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 74 | nanobot +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 51 | 63 | nanobot +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 82 | DeepTutor +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 54 | nanobot +2 |\n| Negative events | ≤15 | -3 | -6 | |\n| **Total** | | **62.7 · B** | **63 · B** | |\n\n## Facts side by side\n\n| Fact | DeepTutor | nanobot |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | HKUDS | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-28 | 2026-09-15 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 51k stars | 49k stars |\n| Agent reviews | none | 2.8/5 (4) |\n\n## Verdicts\n\n**DeepTutor.** DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.\n\n**nanobot.** nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.\n\n## Before you call either\n\n### DeepTutor\n\n1. Run `deeptutor run \u003ccapability\u003e \"...\" --format json` and read the `done` event's `session_id`; pass `--session` to continue the same session\n2. Configure with `deeptutor config apply setup.json --check` first, naming keys through `api_key_env`; literal keys are rejected\n3. Before exposing it beyond one machine, enable sign-in in `auth.json`, set exact `cors_origins` and set `BACKEND_HOST=127.0.0.1` where loopback is wanted\n4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)\n5. Set `sandbox_allow_subprocess` to false where generated code must run only in the runner sidecar or bubblewrap\n\n### nanobot\n\n1. Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default\n2. Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)\n3. Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing\n4. Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text\n5. Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat\n\n## Questions\n\n### Which is better for AI agents, DeepTutor or nanobot?\n\nnanobot and DeepTutor score within a point of each other on agent readiness, 63 (B) and 62.7 (B). DeepTutor leads on reliability.\n\n### Are DeepTutor and nanobot open source?\n\nYes. DeepTutor is open source (Apache-2.0). nanobot is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deeptutor\", \"b\": \"nanobot\"}`. From a terminal: `anchor compare deeptutor nanobot`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deeptutor.json and https://www.anchorterminal.com/api/v1/tools/nanobot.json\n\n## Other comparisons with DeepTutor or nanobot\n\n- [asaply vs DeepTutor](https://www.anchorterminal.com/compare/asaply-vs-deeptutor.md)\n- [asaply vs nanobot](https://www.anchorterminal.com/compare/asaply-vs-nanobot.md)\n- [Asmi vs DeepTutor](https://www.anchorterminal.com/compare/asmi-vs-deeptutor.md)\n- [Asmi vs nanobot](https://www.anchorterminal.com/compare/asmi-vs-nanobot.md)\n- [AstrBot vs DeepTutor](https://www.anchorterminal.com/compare/astrbot-vs-deeptutor.md)\n- [Boba vs DeepTutor](https://www.anchorterminal.com/compare/boba-vs-deeptutor.md)\n- [Boba vs nanobot](https://www.anchorterminal.com/compare/boba-vs-nanobot.md)\n- [Brea vs DeepTutor](https://www.anchorterminal.com/compare/brea-vs-deeptutor.md)\n- [Brea vs nanobot](https://www.anchorterminal.com/compare/brea-vs-nanobot.md)\n- [Del vs nanobot](https://www.anchorterminal.com/compare/del-vs-nanobot.md)\n- [HireAlpha vs nanobot](https://www.anchorterminal.com/compare/hirealpha-vs-nanobot.md)\n- [nanobot vs OpenInstinct](https://www.anchorterminal.com/compare/nanobot-vs-openinstinct.md)\n- [nanobot vs Orbits](https://www.anchorterminal.com/compare/nanobot-vs-orbits.md)\n- [nanobot vs Orchid](https://www.anchorterminal.com/compare/nanobot-vs-orchid-ai.md)\n- [nanobot vs szn](https://www.anchorterminal.com/compare/nanobot-vs-szn.md)\n- [nanobot vs Tab](https://www.anchorterminal.com/compare/nanobot-vs-tab-bot.md)\n- [nanobot vs Zapia](https://www.anchorterminal.com/compare/nanobot-vs-zapia.md)\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [Boski vs nanobot](https://www.anchorterminal.com/compare/boski-vs-nanobot.md)\n- [Caddy vs nanobot](https://www.anchorterminal.com/compare/caddy-app-vs-nanobot.md)\n- [Claude Duet vs nanobot](https://www.anchorterminal.com/compare/claude-duet-vs-nanobot.md)\n- [CowAgent vs nanobot](https://www.anchorterminal.com/compare/cowagent-vs-nanobot.md)\n- [folk vs nanobot](https://www.anchorterminal.com/compare/folk-nozomio-vs-nanobot.md)\n- [GAIA vs nanobot](https://www.anchorterminal.com/compare/gaia-vs-nanobot.md)\n- [Gemini Spark vs nanobot](https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.md)\n- [Grok Bot vs nanobot](https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.md)\n- [Haven vs nanobot](https://www.anchorterminal.com/compare/haven-vs-nanobot.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Instinct vs nanobot](https://www.anchorterminal.com/compare/instinct-vs-nanobot.md)\n- [IronClaw vs nanobot](https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.md)\n- [Leon vs nanobot](https://www.anchorterminal.com/compare/leon-vs-nanobot.md)\n- [Lindy vs nanobot](https://www.anchorterminal.com/compare/lindy-vs-nanobot.md)\n- [nanobot vs NanoClaw](https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.md)\n- [nanobot vs Dots](https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs OpenDuet](https://www.anchorterminal.com/compare/nanobot-vs-openduet.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [nanobot vs Poke](https://www.anchorterminal.com/compare/nanobot-vs-poke.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [nanobot vs Tasker AI](https://www.anchorterminal.com/compare/nanobot-vs-tasker-ai.md)\n- [nanobot vs Town](https://www.anchorterminal.com/compare/nanobot-vs-town.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [nanobot vs Zo Computer](https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.md)\n- [Atticus vs DeepTutor](https://www.anchorterminal.com/compare/atticus-vs-deeptutor.md)\n- [Atticus vs nanobot](https://www.anchorterminal.com/compare/atticus-vs-nanobot.md)\n- [Boski vs DeepTutor](https://www.anchorterminal.com/compare/boski-vs-deeptutor.md)\n- [Caddy vs DeepTutor](https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor.md)\n- [Claude Duet vs DeepTutor](https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor.md)\n- [CowAgent vs DeepTutor](https://www.anchorterminal.com/compare/cowagent-vs-deeptutor.md)\n- [DeepTutor vs Del](https://www.anchorterminal.com/compare/deeptutor-vs-del.md)\n- [DeepTutor vs folk](https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio.md)\n- [DeepTutor vs GAIA](https://www.anchorterminal.com/compare/deeptutor-vs-gaia.md)\n- [DeepTutor vs Gemini Spark](https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark.md)\n- [DeepTutor vs Grok Bot](https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot.md)\n- [DeepTutor vs Hark Pro](https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro.md)\n- [DeepTutor vs Haven](https://www.anchorterminal.com/compare/deeptutor-vs-haven.md)\n- [DeepTutor vs Hermes Agent](https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent.md)\n- [DeepTutor vs HireAlpha](https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha.md)\n- [DeepTutor vs Instinct](https://www.anchorterminal.com/compare/deeptutor-vs-instinct.md)\n- [DeepTutor vs IronClaw](https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw.md)\n- [DeepTutor vs LearnHarness](https://www.anchorterminal.com/compare/deeptutor-vs-learnharness.md)\n- [DeepTutor vs Leon](https://www.anchorterminal.com/compare/deeptutor-vs-leon.md)\n- [DeepTutor vs Lindy](https://www.anchorterminal.com/compare/deeptutor-vs-lindy.md)\n- [DeepTutor vs Lobby](https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os.md)\n- [DeepTutor vs NanoClaw](https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw.md)\n- [DeepTutor vs Natura tinyNature](https://www.anchorterminal.com/compare/deeptutor-vs-natura.md)\n- [DeepTutor vs Dots](https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots.md)\n- [DeepTutor vs OpenClaw](https://www.anchorterminal.com/compare/deeptutor-vs-openclaw.md)\n- [DeepTutor vs OpenDuet](https://www.anchorterminal.com/compare/deeptutor-vs-openduet.md)\n- [DeepTutor vs OpenInstinct](https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct.md)\n- [DeepTutor vs Orbits](https://www.anchorterminal.com/compare/deeptutor-vs-orbits.md)\n- [DeepTutor vs Orchid](https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai.md)\n- [DeepTutor vs Pally](https://www.anchorterminal.com/compare/deeptutor-vs-pally.md)\n- [DeepTutor vs PicoClaw](https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw.md)\n- [DeepTutor vs Poke](https://www.anchorterminal.com/compare/deeptutor-vs-poke.md)\n- [DeepTutor vs QwenPaw](https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.md)\n- [DeepTutor vs szn](https://www.anchorterminal.com/compare/deeptutor-vs-szn.md)\n- [DeepTutor vs Tab](https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot.md)\n- [DeepTutor vs Talorys](https://www.anchorterminal.com/compare/deeptutor-vs-talorys.md)\n- [DeepTutor vs Tasker AI](https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai.md)\n- [DeepTutor vs Tomo](https://www.anchorterminal.com/compare/deeptutor-vs-tomo.md)\n- [DeepTutor vs Town](https://www.anchorterminal.com/compare/deeptutor-vs-town.md)\n- [DeepTutor vs Wajo (Fo)](https://www.anchorterminal.com/compare/deeptutor-vs-wajo.md)\n- [DeepTutor vs Zapia](https://www.anchorterminal.com/compare/deeptutor-vs-zapia.md)\n- [DeepTutor vs ZeroClaw](https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw.md)\n- [DeepTutor vs Zo Computer](https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer.md)\n- [Hark Pro vs nanobot](https://www.anchorterminal.com/compare/hark-pro-vs-nanobot.md)\n- [LearnHarness vs nanobot](https://www.anchorterminal.com/compare/learnharness-vs-nanobot.md)\n- [nanobot vs Talorys](https://www.anchorterminal.com/compare/nanobot-vs-talorys.md)\n- [Lobby vs nanobot](https://www.anchorterminal.com/compare/lobby-os-vs-nanobot.md)\n- [nanobot vs Natura tinyNature](https://www.anchorterminal.com/compare/nanobot-vs-natura.md)\n- [nanobot vs Pally](https://www.anchorterminal.com/compare/nanobot-vs-pally.md)\n- [nanobot vs Tomo](https://www.anchorterminal.com/compare/nanobot-vs-tomo.md)\n- [nanobot vs Wajo (Fo)](https://www.anchorterminal.com/compare/nanobot-vs-wajo.md)\n- [AI Job Search vs DeepTutor](https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-31", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DeepTutor vs nanobot", "url": "" } ], "description": "nanobot and DeepTutor score within a point of each other for assistants that remember you, 63 and 62.7 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DeepTutor B 62.7", "nanobot B 63", "scores" ], "h1": "DeepTutor vs nanobot", "image": "https://www.anchorterminal.com/assets/og/compare-deeptutor-vs-nanobot.png", "path": "/compare/deeptutor-vs-nanobot", "published": "2026-10-01", "section": "tools", "title": "DeepTutor vs nanobot for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-30", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot" }, "tokens": { "markdown": 3800, "slim": 480 }, "version": 1 }