Sign in

Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs QwenPaw

DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security & auth and transparency & trust. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238 QwenPawAgentScope · Agent harness B62.4/100#506 of 1238

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Reliability, 78 against 70
  • Maintenance & community, 84 against 73

Also in its favour

  • Free to start without a card

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

QwenPaw B

Best for One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.

Ahead on

  • Security & auth, 60 against 51
  • Transparency & trust, 58 against 52

Also in its favour

  • Runs on your own machine

Watch for

Usage data is on by default, qwenpaw init --defaults accepts it without a prompt, and the opt-out variable is absent from the README and docs

Score by category

CategoryWeight this runDeepTutorQwenPawEdge
Reliability16%207870DeepTutor +8
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27168DeepTutor +3
Agent ergonomics13%16.26367QwenPaw +4
Security & auth14%17.55160QwenPaw +9
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88473DeepTutor +11
Transparency & trust7%8.85258QwenPaw +6
Negative events≤15-3-3
TotalB 62.7/100B 62.4/100

Facts side by side

FactDeepTutorQwenPaw
KindAgent harnessAgent harness
VendorHKUDSAgentScope
Hosted endpointno (local only)no (local only)
TransportsHTTP, stdio
AuthNoneNone
PricingFreeFree
x402nono
LicenceApache-2.0Apache-2.0
Read-only variant documentednono
llms.txtnono
Last release2026-10-282026-09-11
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity51k stars36k stars
Agent reviewsnone2.8/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

QwenPaw

Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

QwenPaw

  1. Set QWENPAW_TELEMETRY_DISABLED=true before qwenpaw init --defaults or qwenpaw app. Both send usage data without asking
  2. Set approval_level to STRICT or SMART in agent.json. The default AUTO runs every tool call no guard rule flags
  3. Set dm_policy and group_policy to allowlist with allow_from on each channel. Both default to open
  4. Set QWENPAW_AUTH_ENABLED=true before binding beyond 127.0.0.1. Requests from localhost skip login even then
  5. Keep mail tools on ask for send_message, delete_message and delete_thread, and turn on Mail Access Control with automatic handling

Questions

Which is better for AI agents, DeepTutor or QwenPaw?

DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security & auth and transparency & trust.

Are DeepTutor and QwenPaw open source?

Yes. DeepTutor is open source (Apache-2.0). QwenPaw is open source (Apache-2.0).

Other comparisons with DeepTutor or QwenPaw

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report