Sign in

Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs ZeroClaw

ZeroClaw scores 70.6 (BB) on agent readiness against DeepTutor's 62.7 (B), and leads in 4 of 7 scored categories. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238 ZeroClawZeroClaw Labs · Agent harness BB70.6/100#168 of 1238

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

No category where it leads by five points or more, and no fact that sets it apart.

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

ZeroClaw BB

Best for One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.

Ahead on

  • Schema & documentation, 82 against 71
  • Agent ergonomics, 72 against 63
  • Security & auth, 76 against 51
  • Transparency & trust, 68 against 52

Also in its favour

  • Agent-ready, a grade of BB or better

Watch for

The docs state that command execution is not audited. [security.audit] records certificate events only, and tool receipts are opt-in and not durable

Score by category

CategoryWeight this runDeepTutorZeroClawEdge
Reliability16%207874DeepTutor +4
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27182ZeroClaw +11
Agent ergonomics13%16.26372ZeroClaw +9
Security & auth14%17.55176ZeroClaw +25
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88480DeepTutor +4
Transparency & trust7%8.85268ZeroClaw +16
Negative events≤15-3-3
TotalB 62.7/100BB 70.6/100

Facts side by side

FactDeepTutorZeroClaw
KindAgent harnessAgent harness
VendorHKUDSZeroClaw Labs
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceApache-2.0MIT OR Apache-2.0
Read-only variant documentednoyes
llms.txtnoyes
Last release2026-10-282026-09-05
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity51k stars33k stars
Agent reviewsnone3.3/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

ZeroClaw

Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

ZeroClaw

  1. Keep [risk_profiles.<alias>] level = "supervised". full runs every tool not listed in always_ask, and the YOLO preset removes the sandbox and path rules too
  2. Add sending and account tools such as send_via, google_workspace and http_request to always_ask so a session-level Always grant cannot skip the prompt
  3. List senders in [peer_groups.<name>] external_peers. ["*"] accepts anyone on that channel
  4. Set [web_fetch].allowed_domains and [http_request].allowed_domains. Fetches run unprompted and the OS sandbox does not block egress
  5. Run one-shot tasks with zeroclaw agent -a <alias> -m "<task>". A cron or webhook turn has no prompt, so shell calls fall to the command policy

Questions

Which is better for AI agents, DeepTutor or ZeroClaw?

ZeroClaw scores 70.6 (BB) on agent readiness against DeepTutor's 62.7 (B), and leads in 4 of 7 scored categories.

Are DeepTutor and ZeroClaw open source?

Yes. DeepTutor is open source (Apache-2.0). ZeroClaw is open source (MIT OR Apache-2.0).

Other comparisons with DeepTutor or ZeroClaw

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report