Devin

Name: Devin
Author: Cognition

Devin started as a cloud 'AI software engineer' that works in its own virtual machine, takes tasks from the web app, Slack, Microsoft Teams, Linear or the API, and opens pull requests. In June 2026 Cognition renamed its Windsurf editor to Devin Desktop, with an Agent Command Center that manages local and cloud agents from one Kanban view, and replaced the Cascade agent with Devin Local. The Devin CLI runs locally on macOS, Linux, WSL and Windows and can hand work to cloud sessions. Cognition trains its own SWE-series models and also offers Claude, GPT, Gemini and Grok models.

devin.ai Docs Pricing Add to compare

What reviewers and users praise

Team users describe it as one of the most mature cloud-hosted, team-managed coding agents, moving most of their workflow to it (HN, June and Sept 2026).
Former Windsurf users report being satisfied with Cognition's stewardship of the editor and its SWE models for routine work (HN, July 2026; r/windsurf).
Very frequent releases: 26 dated release-note entries in the last 90 days.

What they criticise

Users note a lack of feature parity between Devin Cloud and Devin Desktop (HN, Sept 2026).
Some developers see better value in Codex or Claude subscriptions and consider Devin's mindshare faded (HN, July-Sept 2026).
Quota-based usage limits on Desktop draw complaints (r/windsurf).
Training on user data is the default on non-Enterprise plans (opt-out on paid plans).

Rating certificate · AW/26-09/38726 Sept 2026

Not enough evidence

Devin

Cognition · Coding agents

Trust B

Adoption—

Experts—

Crowd52

Experts vs the crowdneeds both scores

Experts—

Crowd52

Price	Free, paid from $20
Use it via	Web app, Desktop app, CLI, Chat apps, API, IDE extension
Runs on	macos, windows, linux, web
Licence	proprietary
Updated	Evidence collected 26 Sept 2026

How the rating was worked out

Weights for Coding agents: adoption 35%, experts 40%, crowd 25%. Fewer than two pillars have enough evidence. The method.

Adoption & momentumweight 35%	—	No public reach signal found
Expertsindependent reviews · weight 40%	—	Only 2 independent reviews (3 needed)
Crowdcommunity sample · weight 25%	52	15 dated posts from hackernews, reddit, forum: 6 positive · 4 mixed · 5 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples
Rating	—	Not rated: fewer than two pillars have enough evidence.

Evidence checks. 4 posts over the three-per-thread limit not counted. 2 items could not be checked at the source (the page could not be fetched, or the quote is from a comment under the linked post); kept and marked “unverified”. How evidence is checked.

Editorial adjustment. Incident-history grade reviewed under methodology revision 2 (see the trust section).

Trust & safety

Seven dimensions graded A–D from documented facts. Overall: B.

Permission model

Cloud Devin works in its own VM. The Devin CLI has permission scopes and approvals; its OS-level sandbox is opt-in via --sandbox (or enforced by enterprise team setting), fails closed, and is unsupported on Windows; sandbox network filtering is marked unstable. Devin Local in Desktop adds sandboxing per the FAQ, but default-on status was not confirmed. source

Data access scope

Admins review and manage permissions granted to the GitHub/Slack integrations; security profiles restrict network, MCP, git and GitHub CLI access and bind to orgs, automations and sessions; CLI writable paths limited to granted scopes plus the workspace; knowledge scoped to repos/org/enterprise. source

Data storage

Cloud service on AWS with encryption in transit and at rest; data retained for the duration of the customer relationship unless otherwise specified; Enterprise VPC deployment and self-hosted Outposts workers available. Region selection not documented on the pages read. source

Data retention & training

'By default, we may use your data for model training purposes'; paid-plan users can opt out on Data Controls (which also enables ZDR with model providers); Teams opt-out is admin-only; Enterprise data not trained on without written consent. Feedback and interaction data kept 'as long as needed'. source

Incident history (24 months)

Security researcher Johann Rehberger (Embrace The Red) published in August 2025 that prompt injection from untrusted data could make Devin download and run malware and leak secrets; he reported it on 2025-04-06 and said follow-ups on fixes went unanswered for 120+ days. He published related Devin posts on consecutive days (repeated issues). Current fix status not found. Kept at D under revision 2: the researcher reported the issue on 2025-04-06 and said follow-ups on fixes went unanswered for 120+ days; no fix confirmation found (slow and undisclosed). source

Compliance

Trust center lists SOC 2 Type 2 and ISO/IEC 27001:2022; docs state Cognition obtained SOC 2 Type II. Full reports under NDA. source

Transparency

Closed source; detailed dated public release notes (several per week) and extensive docs. source

The experts

2 named independent reviews found; dated reviews from the last 12 months are scored.

mixed
I was able to create a production-ready, relatively complex application in seven days. I found that Devin still requires technical software engineering skill to drive itJames Camilleri (Scott Logic blog) · 20 Oct 2025 · blog.scottlogic.com
mixed
Verdict : Devin lacks the architectural judgment needed for meaningful refactoring. This task is better suited to a human architect or Claude Code's deeper reasoning.Paul Lefizelier (Idlen) · 3 Mar 2026 · idlen.io

The crowd

15 coded posts from hackernews, reddit, forum.

6 positive4 mixed5 negative

positive
90% of my dev workflows have moved to Devin cloud agents.comment thread (June 2026) · 16 Jun 2026 · news.ycombinator.com
positive
As a (former) Windsurf user I'm pretty happy with the progress of the Cognition/Devin ecosystem after they took over Windsurfcomment thread (July 2026) · 8 Jul 2026 · news.ycombinator.com
mixed
I used SWE-1.5 and 1.6 when it was Windsurf (before Devin Desktop), it's not that badcomment thread (July 2026) · 8 Jul 2026 · news.ycombinator.com
positive
It supports any harness that supports ACP (which is most of them)—you can use Claude Code, Codex, OpenCode, etc from the Devin Desktop UI.comment thread (July 2026) · 8 Jul 2026 · news.ycombinator.com
negative
Now it seems like the product has faded (into irrelevance?)comment thread (Sept 2026) · 8 Sept 2026 · news.ycombinator.com
positive
at this point is one of the best cloud-hosted, team-managed coding agentscomment thread (Sept 2026) · 10 Sept 2026 · news.ycombinator.com
mixed
I still use it as my editor but haven't touched the agent for a while simply due to the rise of Codex.comment thread (Sept 2026) · 10 Sept 2026 · news.ycombinator.com
mixed
I compared against cursor's cloud agents, ampcode, and hoplite, and came out surprisingly enjoying devin. I will say that the lack of parity between Devin cloud and Devincomment thread (Sept 2026) · 11 Sept 2026 · news.ycombinator.com

Pricing

As published, checked 26 Sept 2026.

Plan	Price	Notes
Free	Free	Light agent quota, limited models, unlimited inline edits and Tab completions; Devin Desktop only.
Pro	$20 / monthly	Higher quotas, full model availability, Devin Cloud access, Desktop and CLI; SWE-2 free in Desktop/CLI through 2026-10-10.
Max	$200 / monthly	Significantly higher quotas.
Teams	$80 / monthly	$80/month team plan plus $40/month per full dev seat; up to 200 users, centralized billing, admin dashboard.
Enterprise	Custom	SAML/OIDC SSO, VPC deployment, dedicated deployment option, enterprise admin controls.

Recent changes

21 Sept 2026
SWE-2 model rolling out as a research preview; Devin Cloud sessions available from the terminal via Devin CLI. source
15 Sept 2026
macOS machines for cloud Devin sessions. source
8 Sept 2026
Series E: over $2B at a $48B valuation; run-rate revenue grown from $492M to almost $900M since May (crossed $1B on 2026-09-25). source
2 Jun 2026
Windsurf renamed Devin Desktop; Devin Local replaces Cascade (Cascade end-of-life 2026-07-01). source

Ranked alongside

Other ranked entries in Coding agents.

Compare with the top two

OpenCodeAnomaly75

Claude CodeAnthropic73

Zed (Agent Panel)Zed Industries73

GitHub CopilotGitHub (Microsoft)72

Codex (CLI and app)OpenAI71

Sources

Every figure above traces to one of these, observed up to 26 Sept 2026.