Manus

General autonomous agent · Manus · 5/7 verified · Last checked 2026-10-16

Does its work in a sandboxed cloud computer. The Browser Operator extension can also act in your own logged-in browser once you authorize the session. You can take over or stop at any time.

Overall: C (1.60 avg, 5/7 controls verified)

Lock this down first

Use the isolated Cloud Browser rather than Browser Operator for anything that doesn't need your own logins.

Scorecard

Criterion	Rating	Notes
Permission granularity	Unverified	Not confirmed in the docs we checked.
Human approval gates	1/3	You authorize each Browser Operator session, not each action.
Sandboxing	2/3	Cloud tasks run in a sandboxed virtual computer and an isolated cloud browser. Browser Operator runs in your local browser instead.
Secrets handling	2/3	Manus says it never stores your passwords, and cloud browser sessions are encrypted. You take over for codes and MFA.
Audit logs	1/3	Docs say all Browser Operator actions are logged. No detail on access or retention.
Kill switch / interrupt	2/3	Stop a Browser Operator task by closing its tab, or take over by clicking into it.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Permission granularity, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

Vendor? Request a correction. We review corrections within 7 days.