Rating certificate · AW/26-09/62326 Sept 2026
62of 100
The Register / Personal & desktop agents / Agent Zero
Register entry · Personal & desktop agents · updated 26 Sept 2026
Agent Zero
Agent Zero is an open-source agent that runs as a Docker container with a web UI, giving the agent a full Linux desktop, a browser it can drive, document co-editing, projects with memory, and a Plugin Hub. A desktop launcher manages instances, and an A0 CLI connector can bridge the agent to the host machine's files. It is model-agnostic and free; version 2.0 shipped in June 2026 and releases have been weekly since.
What reviewers and users praise
- Users running it long-term praise capability for free with their own models (r/AgentZero)
- Wide scope: desktop, browser, documents and plugins in one self-hosted package (PromptQuorum review, Sep 2026)
- Weekly release cadence (12 releases in 90 days)
What they criticise
- Users report loops that burn tokens, and slow responses versus other agents (r/AgentZero)
- Setup and local-model configuration problems are a recurring complaint (r/AgentZero)
- Docker-only install path (PromptQuorum review)
- Repeated CVEs 2025–2026, two of which the reporter says got no vendor response
Experts vs the crowdneeds both scores
Experts—
Crowd47
| Price | Free |
|---|---|
| Use it via | Web app, Desktop app, CLI, API, MCP server |
| Runs on | macos, linux, windows |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Personal & desktop agents: adoption 30%, experts 35%, crowd 35%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 30% | 78 | GitHub stars 19k → 69 · 12 releases in 90 days → 100reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 35% | — | No independent reviews found |
| Crowdcommunity sample · weight 35% | 47 | 12 dated posts from reddit, hackernews: 4 positive · 3 mixed · 5 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 62 | Provisional: low confidence (2 of 3 pillars, 12 community posts). |
Editorial adjustment. Incident-history grade reviewed under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: B.
C
Permission model
The agent executes terminal, code and browser actions autonomously. It runs inside a Docker container by default (isolation), and host file access through the A0 CLI is a per-session toggle; per-profile Tool/MCP/Skill permissions exist. No per-action approval mode is documented. source
A
Data access scope
Access is scoped to the container and per-project workspaces; host read/write access is toggled explicitly per CLI session; profiles restrict Tools, MCPs and Skills. Documented in the A0 CLI connector guide. source
A
Data storage
Self-hosted Docker instance; instance data is mounted into /a0/usr on the user's machine or server. No required vendor cloud storage. source
n/e
Data retention & training
Model-agnostic; retention/training depends on the model provider the user connects. Not graded.
D
Incident history (24 months)
Repeated CVEs within 24 months (path traversal, SSRF, insecure permissions, stored XSS). NVD text for CVE-2026-4307 and CVE-2026-4308 states the vendor did not respond to early disclosure. CVE-2026-47119 was fixed in v1.15. Kept at D under revision 2: NVD records for CVE-2026-4307 and CVE-2026-4308 state the vendor did not respond to early disclosure (undisclosed handling). source
D
Compliance
Self-hosted open-source project; no SOC 2 / ISO 27001 attestations published. source
A
Transparency
MIT licence (LICENSE file; GitHub API reports NOASSERTION because of extra header lines), public GitHub releases with notes. source
The experts
0 named independent reviews found; dated reviews from the last 12 months are scored.
- None found.
The crowd
12 coded posts from reddit, hackernews.
4 positive3 mixed5 negative
- negative
Then, sooner or later, it gets into some kind of loop that compromises the task and burns through my DeepSeek V4.1 Flash tokens.
r/AgentZero · 23 Sept 2026 · reddit.com - negative
this is an Agent Zero bug with how it handles local/utility model API keys in version 2.12.
r/AgentZero · 15 Sept 2026 · reddit.com - positive
long time AgentZero enthusiast, currently running for several months 2 different instances at home and in my company. I love this agent.
r/AgentZero · 4 Sept 2026 · reddit.com - mixed
one of them is still running v0.98 (yeah, I know, it’s old as hell 😂). But honestly, for what I use it for, I find it much better than the …
r/AgentZero · 14 Aug 2026 · reddit.com - negative
five days fighting with chatgpt to get this going. On fresh install.
r/AgentZero · 11 Aug 2026 · reddit.com - negative
When I open the desktop tab, it says "Xpra exited before port 14500 was ready."
r/AgentZero · 24 Jul 2026 · reddit.com - positive
You can do anything, absolutely anything, and it's super good.
r/AgentZero · 20 Jul 2026 · reddit.com - mixed
I love Agent Zero but I getting things done using it takes a lot longer than using other agents eventhough I prefer it result.
r/AgentZero · 1 Jul 2026 · reddit.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Self-hosted | Free | MIT-licensed; you pay only for the model API you connect. No paid tier confirmed as of Sep 2026. |
Recent changes
- 23 Sept 2026
v2.13: reorganised sidebar with project folders, faster model calls, file browser UX upgrades. source
- 9 Sept 2026
v2.12: rebuilt file browser with remote connections (SSH, SMB, S3, FTPS, WebDAV plugins), unified editor, security fixes. source
- 19 Aug 2026
v2.10: browser handles bot detection, @ tagging, ACP support for external editors. source
- 12 Aug 2026
v2.9: Agent Editor for building custom agents. source
- 24 Jun 2026
v2.0 released. source
Ranked alongside
Other ranked entries in Personal & desktop agents.
Hermes AgentNous Research69
OpenClawOpenClaw Foundation (created by Peter Steinberger)63
ZeroClawZeroClaw Labs61
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.