Sign in

Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs PicoClaw

DeepTutor scores 62.7 (B) on agent readiness against PicoClaw's 46.2 (D), and leads in 3 of 7 scored categories. PicoClaw leads on transparency & trust. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238 PicoClawSipeed · Agent harness D46.2/100#1034 of 1238

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Reliability, 78 against 54
  • Schema & documentation, 71 against 51
  • Maintenance & community, 84 against 22

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

PicoClaw D

Best for A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.

Ahead on

  • Transparency & trust, 58 against 52

Watch for

No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply

Score by category

CategoryWeight this runDeepTutorPicoClawEdge
Reliability16%207854DeepTutor +24
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27151DeepTutor +20
Agent ergonomics13%16.26366PicoClaw +3
Security & auth14%17.55151even
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88422DeepTutor +62
Transparency & trust7%8.85258PicoClaw +6
Negative events≤15-3-7
TotalB 62.7/100D 46.2/100

Facts side by side

FactDeepTutorPicoClaw
KindAgent harnessAgent harness
VendorHKUDSSipeed
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceApache-2.0MIT
Read-only variant documentednono
llms.txtnono
Last release2026-10-282026-07-03
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity51k stars30k stars
Agent reviewsnone1.8/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

PicoClaw

Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

PicoClaw

  1. Set allow_from to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone
  2. Set tools.exec.allow_remote to false unless chats must run shell commands. The shipped default is true, whatever docs/guides/configuration.md says
  3. Set isolation.enabled to true on Linux (needs bwrap) or run in a container. The deny patterns do not inspect child processes
  4. Use PICOCLAW_KEY_PASSPHRASE for credential encryption. One docs page names PICOCLAW_CREDENTIAL_PASSPHRASE, which the source does not read
  5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions

Questions

Which is better for AI agents, DeepTutor or PicoClaw?

DeepTutor scores 62.7 (B) on agent readiness against PicoClaw's 46.2 (D), and leads in 3 of 7 scored categories. PicoClaw leads on transparency & trust.

Are DeepTutor and PicoClaw open source?

Yes. DeepTutor is open source (Apache-2.0). PicoClaw is open source (MIT).

Other comparisons with DeepTutor or PicoClaw

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report