Independent register of AI agents & harnesses · no sponsored placementsEdition 2026-09 · 107 entries · evidence to 26 Sept 2026

The Register / Coding agents / Jules

Register entry · Coding agents · updated 26 Sept 2026

Jules

Jules is a cloud-hosted coding agent from Google Labs, driven by Gemini models. For each task it clones a GitHub repository into a fresh cloud VM, proposes a plan, makes changes, runs tests and opens a pull request. It is used through a web app, a CLI (Jules Tools) and a REST API, and supports scheduled and suggested tasks. Paid tiers come bundled with Google AI Pro and Ultra subscriptions for personal Google accounts only.

What reviewers and users praise

  • Asynchronous, parallel task model that returns reviewable pull requests (InfoWorld review; Digital Applied comparison; r/JulesAgent workflow posts)
  • Isolated per-task cloud VM rather than the user's machine (HN users cite it as a sandbox)
  • Free tier of 15 tasks a day, with limits counted per task rather than per token (Jules usage-limits docs; InfoWorld)

What they criticise

  • Many users say its code quality is worse than Claude Code or Antigravity on the same tasks (r/JulesAgent, HN, Thomas Wiegold)
  • Reliability complaints: empty PRs, a PR button that fails, ignored AGENTS.md instructions (r/JulesAgent, 2026)
  • No changelog updates since March 2026; users ask whether it is dead (r/JulesAgent, Aug 2026)
  • Works only with GitHub repositories; paid plans are open only to personal @gmail.com accounts (InfoWorld; usage-limits docs)
Rating certificate · AW/26-09/40826 Sept 2026

Jules

Google (Google Labs) · Coding agents

No. 16 of 16 in categoryhigh confidenceTrust B
Adoption5
Experts50
Crowd45
Experts vs the crowdcrowd cooler by 5
Experts50
Crowd45
PriceFree, paid from $19.99
Use it viaWeb app, CLI, API
Runs onweb
Licenceproprietary
UpdatedEvidence collected 26 Sept 2026

How the rating was worked out

Weights for Coding agents: adoption 35%, experts 40%, crowd 25%. Pillars without enough evidence are left out and the others re-weighted. The method.

Adoption & momentumweight 35%5npm weekly downloads 1.9k → 8 · 0 releases in 90 days → 0
reach × 0.7 + momentum × 0.3
Expertsindependent reviews · weight 40%503 independent reviews (1 positive · 1 mixed · 1 negative), averaged toward 50 for small samples.
Benchmarks, shown not scored: SWE-bench Verified No. 46 of 77 (Google Jules + Gemini 2.0 Flash (v20241212-experimental))
Crowdcommunity sample · weight 25%4514 dated posts from reddit, hackernews: 5 positive · 2 mixed · 7 negative
(positive + ½ mixed) ÷ n, averaged toward 50 for small samples
Rating33high confidence (3 of 3 pillars, 14 community posts).

Editorial adjustment. Incident-history grade reviewed under methodology revision 2 (see the trust section).

Trust & safety

Seven dimensions graded A–D from documented facts. Overall: B.

B

Permission model

Every task runs in a fresh cloud VM, not on the user's machine. Approving the plan is the documented control, but it is not required: 'If you navigate away, Jules will eventually auto-approve the plan, which is set on a timer.' There are no per-action approval modes. Graded B because plan approval is documented but there is no per-action approval; the VM isolation would otherwise lift it. source

A

Data access scope

Access comes through the 'Google Labs Jules' GitHub app, and the user picks which repositories it can reach in GitHub settings (documented in the FAQ). source

C

Data storage

Code is cloned into Google-hosted cloud VMs that have internet access. The Jules docs describe no region or deletion controls; the legal page (jules.google.com/legal) did not render for us. source

B

Data retention & training

FAQ: 'Jules does not train on private repository content.' No retention period is stated in the docs. Public-repo content is not covered by that statement. The legal page could not be read. source

D

Incident history (24 months)

In August 2025 Johann Rehberger (Embrace The Red) published several prompt-injection flaws in Jules: data exfiltration, remote code execution ('Zombie Agent') and invisible Unicode-tag injection. They were reported to Google in May/June 2025, and the researcher said they were not mitigated as of publication. We found no public statement from Google that they are fixed. Kept at D under revision 2: the researcher reported the flaws in May-June 2025 and stated they were still not mitigated when he published in August 2025; Google closed one ticket as already tracked and did not answer questions about a fix timeline. That is a slow and undisclosed fix at best. source

n/e

Compliance

We found no attestation covering Jules itself. It is a Google Labs product, and the Jules docs do not name SOC 2 or ISO scope. Google Cloud's certifications were not assumed to apply. source

B

Transparency

Closed source. It has a public, dated per-entry changelog and docs, but the changelog has had no entry since 2026-03-09. source

The experts

3 named independent reviews found; dated reviews from the last 12 months are scored.

  • positive
    Jules performs better than Gemini CLI despite using the same model, and more like Claude Code and OpenAI Codex.Martin Heller, InfoWorld · 11 Nov 2025 · infoworld.com
  • mixed
    I feel like I'm instructing a junior engineer. I have to be explicit about what I want and check everything it does.Nelson Minar (Nelson's log) · 18 Mar 2026 · nelsonslog.wordpress.com
  • negative
    I tried Jules, Google's earlier coding agent. Also unimpressed.Thomas Wiegold · 27 May 2026 · thomas-wiegold.com

The crowd

14 coded posts from reddit, hackernews.

5 positive2 mixed7 negative
  • negative
    I've gotten 8-9 empty pull requests in a row, Multiple Rewraps of broken code.r/JulesAgent · 12 Sept 2026 · reddit.com
  • mixed
    It's a super useful tool with a super frustrating quirkr/JulesAgent · 5 Sept 2026 · reddit.com
  • negative
    5 months of no updates. Team went dark a few weeks ago.r/JulesAgent · 12 Aug 2026 · reddit.com
  • positive
    I'm running a large share of our development through Google Jules right now.r/JulesAgent · 19 Jul 2026 · reddit.com
  • positive
    I've been running Jules on a cron schedule for a few months now in an Astro/Cloudflare Workers monorepo. The setup has finally stabilizedr/JulesAgent · 17 Jul 2026 · reddit.com
  • negative
    the code it generates is consistently worse than running the exact same prompt in AG.r/JulesAgent · 14 Jul 2026 · reddit.com
  • positive
    It looks much better now and adapts more to the small screen.r/JulesAgent · 14 Jun 2026 · reddit.com
  • negative
    They really need to work on Jules because Claude is in a different galaxy.r/JulesAgent · 22 May 2026 · reddit.com

Pricing

As published, checked 26 Sept 2026.

PlanPriceNotes
Jules (free)Free15 tasks/day, 3 concurrent tasks; Gemini 2.5 Pro per docs.
Jules in Pro (via Google AI Pro)$19.99 / monthly100 tasks/day, 15 concurrent tasks. The price is for the whole Google AI Pro bundle; personal Google accounts only.
Jules in Ultra (via Google AI Ultra, 5x tier)$99.99 / monthly300 tasks/day, 60 concurrent tasks per the docs. Bundle price; a 20x Ultra tier is $199.99/month.

Recent changes

Ranked alongside

Other ranked entries in Coding agents.

Compare with the top two
OpenCodeAnomaly75
Claude CodeAnthropic73
Zed (Agent Panel)Zed Industries73
GitHub CopilotGitHub (Microsoft)72

Sources

Every figure above traces to one of these, observed up to 26 Sept 2026.

  1. Jules - An Autonomous Coding Agent (homepage, plan tiers)
  2. Jules changelog (44 entries, newest 2026-03-09)
  3. Jules plans and usage limits
  4. Google AI plans (US prices; footnote: 'Jules is an asynchronous coding agent that is currently in beta.')
  5. @google/jules npm registry (latest 0.1.42, published 2025-12-16)
  6. jules-sdk (Apache-2.0, 134 stars, one release 2026-02-03); not the product source
  7. Digital Applied: Claude Code vs Codex vs Jules Q2 2026 (agency team, unnamed author; not counted as expert)
  8. kie.ai: What Is Jules? (July 2026; reports rebrand previews and v2 rewrite)
  9. PullPush archive of r/JulesAgent (source of Reddit post text)
  10. HN Algolia search (source of HN comment text)