OpenHands

Coding agent (open source) · OpenHands · 4/7 verified · Last checked 2026-10-16

Runs actions in a Docker sandbox by default. Confirmation mode plus an LLM security analyzer can pause risky actions for a human.

Overall: B (2.00 avg, 4/7 controls verified)

Lock this down first

Set SECURITY_CONFIRMATION_MODE=true so risky actions wait for you.

Criterion	Rating	Notes
Permission granularity	Unverified	Not confirmed in the docs we checked.
Human approval gates	2/3	Confirmation mode and a risk analyzer, configured by env or SDK.
Sandboxing	2/3	Docker sandbox is the default runtime.
Secrets handling	2/3	Secrets manager exports values as env vars. The SDK SecretRegistry masks secret values in tool output.
Audit logs	Unverified	Not confirmed in the docs we checked.
Kill switch / interrupt	2/3	Conversations and sandboxes can be paused, resumed or deleted via SDK and API.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Permission granularity, Audit logs, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Vendor? Request a correction. We review corrections within 7 days.