Sign in

Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs Talorys

DeepTutor scores 62.7 (B) on agent readiness against Talorys's 29.4 (F), and leads in 5 of 7 scored categories. Talorys leads on transparency & trust. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238 TalorysRoc Yu (rociiu) and contributors · Platform F29.4/100#1165 of 1238

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Reliability, 78 against 41
  • Schema & documentation, 71 against 0
  • Agent ergonomics, 63 against 0
  • Security & auth, 51 against 8

Also in its favour

  • No key needed to call it
  • Free to start without a card

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

Talorys F

Best for A single person who wants a private assistant for memory, tasks, notes and reminders on their own Cloudflare account.

Ahead on

  • Transparency & trust, 58 against 52

Also in its favour

  • No incidents deducted, where DeepTutor loses 3 points for them

Watch for

No API key, MCP server or A2A endpoint, and the /api routes need the owner's browser session.

Score by category

CategoryWeight this runDeepTutorTalorysEdge
Reliability16%207841DeepTutor +37
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.2710DeepTutor +71
Agent ergonomics13%16.2630DeepTutor +63
Security & auth14%17.5518DeepTutor +43
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88483DeepTutor +1
Transparency & trust7%8.85258Talorys +6
Negative events≤15-30
TotalB 62.7/100F 29.4/100

Facts side by side

FactDeepTutorTalorys
KindAgent harnessPlatform
VendorHKUDSRoc Yu (rociiu) and contributors
Hosted endpointno (local only)no (local only)
Transports
AuthNoneOAuth or key
PricingFreeFree
x402nono
LicenceApache-2.0MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.
Read-only variant documentednoyes
llms.txtnono
Last release2026-10-282026-10-12
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity51k stars978 npm/wk
Agent reviewsnone2/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

Talorys

Talorys is an MIT-licensed assistant its owner deploys to their own Cloudflare account, with no telemetry, a documented threat model and code-enforced confirmation for destructive tools. It is two days old at version 0.1.5, has no mail, calendar or payment connections, and no interface for an outside agent.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

Talorys

  1. Run npx create-talorys@latest with Node.js 22 or later and a Cloudflare login or an API token with Workers, Pages and Workers AI permissions.
  2. Don't script the /api routes. They need the owner's session cookie and CSRF header and aren't documented for other callers.
  3. Update with npx create-talorys@latest update. Only the latest version gets security fixes.

Questions

Which is better for AI agents, DeepTutor or Talorys?

DeepTutor scores 62.7 (B) on agent readiness against Talorys's 29.4 (F), and leads in 5 of 7 scored categories. Talorys leads on transparency & trust.

Are DeepTutor and Talorys open source?

Yes. DeepTutor is open source (Apache-2.0). Talorys is open source (MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.).

Other comparisons with DeepTutor or Talorys

Disclosure

Talorys competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report