OpenHands

Coding agent (open source) · OpenHands · Last checked 2026-10-16

Runs actions in a Docker sandbox by default. Confirmation mode plus an LLM security analyzer can pause risky actions for a human.

Overall: B (2.00 avg over 4 verified criteria)

Lock this down first

Set SECURITY_CONFIRMATION_MODE=true. It is off unless you turn it on.

Criterion	Rating	Notes
Permission granularity	Unverified	Not confirmed in the docs we checked.
Human approval gates	2/3	Confirmation mode and a risk analyzer, configured by env or SDK.
Sandboxing	2/3
Secrets handling	2/3	Secrets manager exports values as env vars. The SDK SecretRegistry masks secret values in tool output.
Audit logs	Unverified	Not confirmed in the docs we checked.
Kill switch / interrupt	2/3	Conversations and sandboxes can be paused, resumed or deleted via SDK and API.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Permission granularity, Audit logs, Network egress control. That means we could not confirm it in public docs, not that it is missing.