Skip to content
AppDuo
ReviewsComparisonsBest ofCollections
Source-backed analysis15

Review basis

Research-based review: the AppDuo Editorial Team compiled it from official pages, documentation, app stores, press and user feedback, without hands-on testing. Every claim links to a source with the date it was checked.

15 reference sources

Information updated Nov 11, 2026

How we review
OpenHands logo

OpenHands Review

Open-source platform for coding agents, self-hosted or via a managed cloud

Editorial Team6.9/10Write the first review

By Official AppDuo editorial team · Fact-checked

  • Web
  • API
Open source · Free
Visit OpenHands
Compare side by side
On this page

Decide at a glance

Our verdict

OpenHands suits engineering teams that want control over models, data and the infrastructure agents run on, and are willing to do their own setup. The trade-off is that you own sandbox security and LLM costs, and the cheapest paid plan on the pricing page is the $500/month business-only Teams tier.

Best for: Engineering teams that want to self-host coding agents with their own LLM

Skip it if: People who want a plug-and-play in-editor code assistant

Pros

  • Open source under the MIT license; the GitHub repo has more than 93,000 stars
  • Works with any LLM through your own key and can drive other agents such as Claude Code, Codex and Gemini CLI via ACP
  • Offers a Python SDK, an Agent Server (REST/WebSocket), scheduled or webhook automations, and integrations with GitHub, GitLab, Bitbucket, Slack and Jira

Cons

  • The legacy CLI is no longer actively maintained and the old local GUI (openhands serve) is deprecated, so existing users need to move to Agent Canvas
  • Had a command-injection flaw (CVE-2026-33718, CVSS 7.6, patched), a researcher published a prompt-injection route to leak a GitHub token, and the vendor acknowledges its sandbox does not stop secrets being exfiltrated
All pros and cons · Who is it for?

More pros

  • Backed by published research: an ICLR 2025 paper evaluates its agents on 15 tasks, including SWE-bench and WebArena
  • Frequent releases: v1.36.0, v1.37.0 and v1.38.0 shipped between November 5 and 10, 2026

More cons

  • The privacy policy lets the vendor use your content to train its models and describes no opt-out
  • No paid plan for individuals: the cheapest is Teams at $500/month, and the pricing page does not list OpenHands Cloud prices

Best for

  • Developers who want to build their own agents with the Python SDK
  • Organisations that need SSO, role-based access and budget controls for agents

Skip it if

  • People who do not want to manage API keys, sandboxes or infrastructure

Experience & key features

OpenHands is an open-source platform for software engineering agents, developed by All Hands AI (US). The project began as OpenDevin in 2024 and was later renamed. According to the team's ICLR 2025 paper, its agents write code, use a command line and browse the web inside sandboxed environments.

Main components

Per the official docs, Agent Canvas is the open-source browser client for agent conversations and automations, and connects to local, self-hosted, Cloud or Enterprise backends. The Software Agent SDK is a Python library for building agents, and the Agent Server exposes REST and WebSocket APIs. The README says Agent Canvas runs the OpenHands agent as well as third-party agents such as Claude Code, Codex, Gemini CLI and OpenCode, and can trigger them on a schedule or from webhooks. The legacy CLI is no longer actively maintained, and the local GUI started with openhands serve is deprecated.

Pricing and value

The pricing page lists three tiers, all self-hosted: Agent Canvas is free (MIT); Teams is $500/month for up to 10 users and 5,000 sessions a month, with extra seats at $50/month; Enterprise is custom. Teams and Enterprise are business plans, so they do not compare directly with tools sold per individual. LLM costs are separate because you bring your own key. The pricing page does not list OpenHands Cloud; in September 2025 the vendor's blog announced a $20/month Cloud subscription.

More analysis

Security and data

Each conversation runs in a Docker container, but in an August 2025 post OpenHands itself acknowledges the sandbox does not stop exfiltration of secrets present in the agent's environment. The vendor suggests mitigations such as confirmation mode, a security analyzer and network policies for self-hosted setups. If you use the vendor's services, its privacy policy lets it use your content for model training.

Versus alternatives

OpenHands is a self-hosted platform for orchestrating agents, unlike command-line tools such as Claude Code and OpenCode or editor extensions such as Cline; Agent Canvas can even drive Claude Code and OpenCode. Teams that need SSO, RBAC and shared agents across an organisation may find it a closer fit; individuals who only want an in-IDE code assistant may find it heavy.

Screenshots

Agent Canvas automation preview from the official README
Agent Canvas automation preview from the official README
OpenHands promotional image from the official website
OpenHands promotional image from the official website

Plans & pricing

Prices last verified Nov 11, 2026

Agent Canvas

Personal

Free

Free, open source (MIT) and self-hosted; a single user or shared identity. Bring your own LLM key. The pricing page lists no usage limits; support comes from the open-source community.

Teams

Business

$500/mo

$500/month, self-hosted, including up to 10 users; each extra seat $50/month; capped at 5,000 sessions per month. Includes SSO/SAML, RBAC and budgeting controls. Best-effort email support. 30-day trial.

Enterprise

Business

Contact sales

Custom pricing under an enterprise agreement, self-hosted. Everything in Teams plus unlimited seats and uncapped sessions, Standard or Premium support with SLA-based response times, and a customer success manager.

Free plan limits
The self-hosted Agent Canvas is free, but you pay for your own LLM usage and the infrastructure that runs the agents.
Free trial
30-day free trial · no credit card
Cancellation & refunds

The official pricing page does not state a refund policy.

Privacy

The All Hands AI privacy policy (effective September 3, 2025) says the company collects account and billing details, content you submit or generate (prompts, code), device and usage data, and cookies from third-party analytics and advertising tools. It states that content and feedback from use of the services may be used to train and tune the company's AI models, and describes no opt-out from this. Aggregated or de-identified data may be shared with third parties for business purposes. Self-hosted, the agents run on your own infrastructure; data passes through the vendor's services only if you connect to its Cloud backend.

Official pricing page

OpenHands alternatives

Claude Code logo7.4/10

Claude Code

Anthropic's coding agent across terminal, IDE, web and CI

Paid
goose logo7.3/10

goose

Open-source AI agent that runs on your machine and works with many model providers

Open source
All alternatives

Controversies & incidents

Issues documented by the press, regulators, courts or the vendor itself. Every item is sourced; unproven claims are labelled as allegations. Last researched: Nov 11, 2026

  • Medium impactResolvedSecurity ·

    CVE-2026-33718: command injection in the git diff handler

    Per the GitHub security advisory, an authenticated user could run arbitrary commands in the agent sandbox through the path parameter. It was rated High (CVSS 7.6) and fixed in version 1.5.0.

    Read the full account

    Advisory GHSA-7h8w-hj9j-8rjw, published March 23, 2026, states the path parameter of the git diff endpoint reached a shell command unsanitized (CWE-78). The pip package openhands 1.4.0 and earlier was affected, and 1.5.0 contains the fix. The advisory notes that users can already instruct the agent to run commands, but the flaw bypassed the normal execution channels.

    Vendor response

    Per the advisory, the fix shipped in version 1.5.0 (PR #13051) and users are advised to update.

    Sources:GitHub Security Advisory GHSA-7h8w-hj9j-8rjwOSV: CVE-2026-33718

  • Medium impactAllegedSecurity ·

    Researcher publishes prompt-injection route to leak a GitHub token

    According to researcher Johann Rehberger, a prompt hidden in a webpage or source code could make the agent send its GITHUB_TOKEN to an outside server. The post does not confirm a fix.

    Read the full account

    The August 9, 2025 post describes a hidden prompt making the agent render a Markdown image whose URL carried data, leaking a token from the container with no user click. The author says he reported it privately via GitHub on March 13, 2025, followed up several times without a reply, and received a vendor response only on the day he published, 148 days later. On August 14, 2025 OpenHands published a post on mitigating prompt injection: confirmation mode, a security analyzer built with Invariant Labs, Docker sandboxing and network policies for self-hosted setups. It acknowledges the sandbox does not stop exfiltration of secrets in the agent's environment and says it has seen proof-of-concept attacks but no real-world attack.

    Vendor response

    OpenHands described mitigations in its August 14, 2025 post and said no real-world attack had been seen; that post does not address this report specifically.

    Sources:Embrace The Red: OpenHands and the Lethal Trifecta (2025-08-09)OpenHands blog: Mitigating prompt injection attacks in software agents

Frequently asked questions

Is OpenHands free?

The open-source (MIT) Agent Canvas is free and self-hosted, but you pay your own LLM costs. Teams is $500/month for up to 10 users, and Enterprise is custom-priced.

What was OpenHands formerly called?

The project was originally called OpenDevin; an August 20, 2024 post on the official blog describes it as "Formerly OpenDevin".

Which models does OpenHands work with?

The README says it works with any LLM through your own key. Agent Canvas can also run other agents such as Claude Code, Codex and Gemini CLI.

Does OpenHands support Vietnamese?

The official website and docs are in English only, and the vendor does not publish a list of interface languages.

Review evidence & sources15

Scores

Ease of use
6.0
Why this score

It installs via npm, npx or Docker, but you configure the backend, LLM key and sandbox yourself; the Cloud version hosts execution and removes some of that work. The official site and docs are English-only.

Features
8.0
Why this score

Covers Agent Canvas, an SDK, an Agent Server, scheduled or webhook automations, multiple agent types, and SSO, RBAC and budgeting on Teams and Enterprise. That scope is broad for a self-hosted agent tool.

Value for money
7.5
Why this score

The self-hosted version is free under MIT, but the cheapest paid plan is Teams at $500/month for 10 users, with nothing for individuals. LLM costs are separate, and Cloud pricing is not published on the pricing page.

Performance
7.0
Why this score

The ICLR 2025 paper evaluates the agents on 15 tasks including SWE-bench and WebArena; this review does not cite specific benchmark scores, so the score reflects the breadth of public evaluation. Output quality depends heavily on the LLM you choose.

Support
6.5
Why this score

Documentation, a Slack community and GitHub issues are available; the free version relies on the community. Teams gets best-effort email support; only Enterprise has SLA-based response times.

Privacy & security
6.5
Why this score

Self-hosting keeps data on your infrastructure, but the vendor's policy allows content to be used for model training with no stated opt-out. There has been a patched high-severity CVE and a reported prompt-injection token leak, for which the vendor has published only general mitigations.

Sources

Specs & compatibility
Developer
All Hands AI
Headquarters
United States
Launched
2024
Category
DevelopmentAI

Capabilities

  • Open source
  • Self-hostable
  • AI features
  • Public API
  • Integrations
  • Real-time collaboration

Platforms

  • Web
  • API

Interface languages

  • English

Integrations

  • GitHub
  • GitLab
  • Bitbucket
  • Slack
  • Jira
  • Linear
  • Notion
  • Azure DevOps

Support

  • Help center
  • Community forum
  • Email

Change history

  1. Feature.Agent Canvas launched, a self-hostable workspace for running and automating coding agents across an organisation.
  2. Feature.OpenHands Enterprise launched, described as an agent control plane.
  3. Company.All Hands AI announced an $18.8M Series A led by Madrona.
Full change history (8)
  1. Feature.The OpenHands Software Agent SDK was released.
  2. Price.OpenHands Cloud changed its pricing: a $20/month subscription, bring-your-own-key support, and models from its provider list at API cost with no markup.
  3. Company.All Hands AI announced a $5M seed round led by Menlo Ventures.
  4. Update.The paper "OpenHands: An Open Platform for AI Software Developers as Generalist Agents" was posted to arXiv and later accepted to ICLR 2025.
  5. Launch.The OpenDevin repository, the forerunner of OpenHands, was created on GitHub.
About the author

Reviews & comments

Written by readers with a verified email address.

No reviews yet. Have you used OpenHands? Share your real experience.

Reader reviews are counted separately and do not affect the Editorial Team’s score.

No comments yet. Be the first to share your experience.

Comments are readers’ opinions, not content from the AppDuo Editorial Team.