{"license":"CC BY 4.0","attribution":"AI Dispatch — https://aidispatch.news","methodology":"https://aidispatch.news/methodology","generated_at":"2026-09-18T12:10:56.072Z","entity":{"name":"Agent Zero","slug":"agent-zero","type":"agent","subtype":"ai agents frameworks","developer":null,"homepage_url":"https://agent-zero.ai/","summary":"Agent Zero is a self-hosted, open-source agentic framework. Its own homepage bills it as an \"Open Source Agentic Framework\" and as \"Autonomous agentic AI that runs on its own computer, uses and creates tools, learns, self-corrects, and executes transparent workflows.\" The vendor states it runs sandboxed in Docker and connects to the user's local terminal, project files and browser through the A0 CLI, and that it is installed through a guided desktop flow using the Agent Zero Launcher. It is model-agnostic: the page invites users to \"Connect any AI provider\" and states it exposes zero secrets in doing so. Release notes on the capture checked record project-scoped profiles and tool policies in v2.9, and durable subordinate agent lifecycles plus a built-in ACP bridge in v2.10; MCP-powered data pipelines drawing on web and Salesforce sources are also described, and penetration testing is named as a use case. A pull-quote carried on the vendor's homepage, attributed to Alan Majer of The Linux Foundation, calls it \"a highly autonomous agent\" - that is a third-party characterisation the vendor has chosen to display, not AI Dispatch's assessment and not the vendor's own claim. Nothing on the pages checked publishes a compliance certification, any insurance, indemnity or liability position, any audit-trail or tamper-evident logging claim, or any outcome-linked payment term. Those four dimensions score 0 on the trust-gap rubric as published absences, not as gaps in our research.","url":"https://aidispatch.news/agents/agent-zero/","published_at":"2026-09-10T08:28:05.497679+00:00","updated_at":"2026-09-10T11:35:17.012792+00:00"},"fields":[{"key":"open_weights","label":"Open weights","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"api_access","label":"API access","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"human_oversight","label":"Human oversight","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"user_base","label":"User base","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"model_swappable","label":"Model swappable","category":"models","status":"present","value":"Connect any AI provider. Expose zero secrets.","not_yet_interpreted":true,"quote":"Connect any AI provider. Expose zero secrets.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"safety_policy","label":"Safety policy","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"sla_terms","label":"SLA terms","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"deployment_scale","label":"Deployment scale","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"incident_reporting","label":"Incident reporting","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"indemnification","label":"Indemnification","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"fine_tuning","label":"Fine-tuning","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"documented_incidents","label":"Documented incidents","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"third_party_evals","label":"Third-party evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"compliance_certs","label":"Compliance certifications","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"support_model","label":"Support model","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"red_teaming","label":"Red teaming","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":{"state":"flagged","confidence":"high","reviewed_at":null,"detected_at":"2026-08-18T00:20:17.384326+00:00"},"superseded_quote":null},{"key":"insurance_carriers","label":"Insurance carriers","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"audit_trail_immutable","label":"Tamper-evident log","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"dispute_process","label":"Dispute process","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"autonomy_level","label":"Autonomy level","category":"agency","status":"present","value":"Described as \"a highly autonomous agent\" in a pull-quote attributed to Alan Majer of The Linux Foundation, carried on the vendor's own homepage; not the vendor's own characterisation","not_yet_interpreted":false,"quote":"Agent Zero represents a highly autonomous agent, one that can operate across different centralized and decentralized systems and applications.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"data_handling","label":"Data handling","category":"safety","status":"present","value":"States it exposes zero secrets when connecting to AI providers","not_yet_interpreted":false,"quote":"Connect any AI provider. Expose zero secrets.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"initiative","label":"Initiative","category":"agency","status":"present","value":"Autonomous agentic AI that runs on its own computer, uses and creates tools, learns, self-corrects, and executes transparent workflows.","not_yet_interpreted":true,"quote":"Autonomous agentic AI that runs on its own computer, uses and creates tools, learns, self-corrects, and executes transparent workflows.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"supported_regions","label":"Supported regions","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"context_window","label":"Context window","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"liability_cap","label":"Liability cap","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"regulatory_alignment","label":"Regulatory alignment","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"action_space","label":"Action space","category":"agency","status":"present","value":"uses and creates tools, learns, self-corrects, and executes transparent workflows.","not_yet_interpreted":true,"quote":"uses and creates tools, learns, self-corrects, and executes transparent workflows.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"audit_trail","label":"Audit trail","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"protocols_supported","label":"Protocols supported","category":"ecosystem","status":"present","value":"MCP-powered data pipelines","not_yet_interpreted":true,"quote":"MCP-powered data pipelines","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"insurance_available","label":"Insurance available","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"explainability","label":"Explainability","category":"assurance","status":"present","value":"Described as executing \"transparent workflows\"","not_yet_interpreted":false,"quote":"Autonomous agentic AI that runs on its own computer, uses and creates tools, learns, self-corrects, and executes transparent workflows.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"usage_restrictions","label":"Usage restrictions","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"coverage_limits","label":"Coverage limits","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"price_point","label":"Price point","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"high_risk_domains","label":"High-risk domains","category":"impact","status":"present","value":"Offered for penetration-testing use cases: automated security sweeps, vulnerability analysis and remediation guidance.","not_yet_interpreted":false,"quote":"Penetration Testing Deploy automated security sweeps, vulnerability analysis, and remediation guidance.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"environment","label":"Operating environment","category":"agency","status":"present","value":"Runs sandboxed in Docker; connects to the local terminal, project files, and browser via the A0 CLI Connector","not_yet_interpreted":false,"quote":"Keep Agent Zero sandboxed in Docker, then connect it to your local terminal, project files, and browser through A0 CLI.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"base_models","label":"Base models","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"open_source","label":"Open source","category":"ecosystem","status":"present","value":"Open Source Agentic Framework","not_yet_interpreted":true,"quote":"Open Source Agentic Framework","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"model_card","label":"Model or system card","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"target_sectors","label":"Target sectors","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"tool_use","label":"Tool use","category":"ecosystem","status":"present","value":"uses and creates tools","not_yet_interpreted":true,"quote":"uses and creates tools","source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"settlement_mechanism","label":"Settlement mechanism","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"pricing_model","label":"Pricing model","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"marketplace_presence","label":"Marketplace presence","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"availability","label":"Availability","category":"practicality","status":"present","value":"Installed through a guided desktop flow using the Agent Zero Launcher, which also keeps it updated and manages local or remote instances","not_yet_interpreted":false,"quote":"Start with Agent Zero Launcher Install Agent Zero through a guided desktop flow, then keep it updated, back up /a0/usr , and manage local or remote Instances from one app.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"safety_evaluations","label":"Safety evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"outcome_based_pricing","label":"Outcome-based pricing","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"eval_coverage","label":"Evaluation coverage","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://agent-zero.ai/","retrieved_at":"2026-08-08T03:20:03.279689+00:00","review":null,"superseded_quote":null},{"key":"runtime_governance","label":"Runtime governance","category":"assurance","status":"present","value":"Project-scoped profiles and tool policies, introduced in v2.9","not_yet_interpreted":false,"quote":"v2.9 introduces the Agent Editor, project-scoped profiles and tool policies, safer profile lifecycles, Time Travel retention, built-in plugin upgrades, and important security and reliability fixes.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":{"state":"not_in_latest_capture","confidence":"high","latest_capture_at":"2026-09-10T08:13:45.617835+00:00","detected_at":"2026-09-12T00:17:48.054054+00:00"}},{"key":"deployment_options","label":"Deployment options","category":"practicality","status":"present","value":"Self-hosted: runs sandboxed in Docker, connected to the local terminal, project files and browser through A0 CLI","not_yet_interpreted":false,"quote":"Keep Agent Zero sandboxed in Docker, then connect it to your local terminal, project files, and browser through A0 CLI.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"permission_scopes","label":"Permission scopes","category":"assurance","status":"present","value":"Project-scoped profiles and tool policies (v2.9)","not_yet_interpreted":false,"quote":"v2.9 introduces the Agent Editor, project-scoped profiles and tool policies, safer profile lifecycles, Time Travel retention, built-in plugin upgrades, and important security and reliability fixes.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":{"state":"not_in_latest_capture","confidence":"high","latest_capture_at":"2026-09-10T08:13:45.617835+00:00","detected_at":"2026-09-12T00:17:48.054054+00:00"}},{"key":"integrations","label":"Integrations","category":"practicality","status":"present","value":"MCP-powered data pipelines that extract from web and Salesforce sources","not_yet_interpreted":false,"quote":"Build MCP-powered data pipelines that seamlessly extract from web and Salesforce sources.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"model_provider","label":"Model provider","category":"models","status":"present","value":"Bring-your-own model: connects to any AI provider","not_yet_interpreted":false,"quote":"Connect any AI provider. Expose zero secrets.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"goal_complexity","label":"Goal complexity","category":"agency","status":"present","value":"Open-ended: learns, self-corrects, and executes transparent workflows autonomously","not_yet_interpreted":false,"quote":"Autonomous agentic AI that runs on its own computer, uses and creates tools, learns, self-corrects, and executes transparent workflows.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null},{"key":"multi_agent","label":"Multi-agent","category":"ecosystem","status":"present","value":"Durable subordinate agent lifecycles and a built-in ACP bridge, introduced in v2.10","not_yet_interpreted":false,"quote":"v2.10 introduces an interactive shared Browser runtime, durable subordinate lifecycles, scoped composer context and drafts, Responses streaming fixes, and a built-in ACP bridge.","source_url":"https://agent-zero.ai/","retrieved_at":"2026-09-02T22:17:05.371445+00:00","review":null,"superseded_quote":null}],"trust_gap_scores":[{"dimension":"runtime_governance","score":1,"rationale":"The 2026-09-02 capture of the vendor homepage records, in release notes, that v2.9 \"introduces the Agent Editor, project-scoped profiles and tool policies\". A scoping mechanism is therefore claimed to exist by the vendor, which is more than nothing, but the page describes no scope, spend or authority limit enforced at run time, names no enforcement point, and publishes no policy schema. Scored 1, not 0, solely on that changelog line; the earlier v1 rationale here predated this capture and referred to a permission_scopes field that rested on a different span.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-11T08:28:59.458954+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":{"fields":["Runtime governance","Permission scopes"],"newest_capture_at":"2026-09-02T22:17:05.371445+00:00"}},{"dimension":"audit_trail","score":0,"rationale":"No public evidence found. The 2026-09-02 capture markets \"transparent workflows\" and lists \"Time Travel retention\" among v2.9 changes, but neither describes a customer-reviewable record, log retention policy or tamper-evidence; a state-rollback feature is not an audit trail. Absence is the finding.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-11T08:28:59.458954+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"compliance","score":0,"rationale":"No public evidence found. The page checked publishes no certification, framework mapping, auditor or report date.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-11T08:28:59.458954+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"outcome_settlement","score":0,"rationale":"No public evidence found. No pricing or payment terms of any kind appear on the page checked; the three pricing fields previously filed here rested on the site banner \"Open Source Agentic Framework\" and were rejected in this audit.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-11T08:28:59.458954+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"insurance_indemnity","score":0,"rationale":"No public evidence found. No cover, carrier, limit or customer indemnity is published on the page checked.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-11T08:28:59.458954+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null}]}