Hayz Labs

reviews · top 20 list · checked 18 Oct

Top 17 AI automation and agent tools

Tools that do multi-step work for you: workflows that run on their own, agents that browse and fill in forms, and tools that pull data from the web.

Best: ChatGPT (GPT-6) and Claude (tied, scoring 70). 2 of 17 scored.

Security notes for tools on this list

  • Hermes Agent: warning. Three flaws this year: a malicious MCP catalog entry or git repo could run code (fixed in 0.19.0 and a later commit), and a medium flaw in the skills tool has no listed fix. Run it in a sandbox. Checked 18 Oct: source · more
  • Langflow: warning. A critical flaw (CVE-2026-0768, 9.8) lets anyone who can reach the server run code without logging in. Attacks stealing API keys were reported from September 2026. Run 1.11.6 or later and never put it on the internet. Checked 18 Oct: source · more
  • n8n. A user who can edit workflows could run system commands on the server, fixed in 2.31.5 and 2.32.1. Limit who can edit workflows. Checked 18 Oct: source
  • OpenClaw. Two high-severity flaws this year, one exposing stored job secrets, fixed in 2026.8.1. It has many security advisories, so keep it updated and sandboxed. Checked 18 Oct: source · more
  • Dify. An outsider could make the server fetch internal addresses (CVE-2026-105762), fixed in 1.13.0. Checked 18 Oct: source
  • Perplexity Comet. Researchers showed in March 2026 that a calendar invite could silently hijack Comet's agent to read local files and steal saved passwords. Perplexity fixed it before disclosure; keep the agent out of logged-in accounts you cannot afford to lose. Checked 19 Oct: source

Scored ones first, highest score first; on a tie, the more widely used. Unscored ones follow, by adoption (the measure is named on each row). Open the Table to see the number that placed each one and how it was scored.

How we ranked this

Order. Scored ones first, highest score first; on a tie, the more widely used. Unscored ones follow, by adoption (the measure is named on each row).

How we score this list. Our checklist: independent evidence that it does the job (from the last 90 days), the model under it, value, privacy and reliability. The full rules are on How we score. Open "How it was scored" on any row to see the working.

What we did not do. We did not run any of these ourselves. Every number comes from the public source linked on its row, checked on 18 Oct 2026.

Spot a mistake? A wrong rank, price or link: tell us and we will check it against the source. Corrections are dated in News.

Reviews are drafted with help from AI models, including Anthropic's Claude. Model scores come only from outside leaderboards and independent evaluations, by a written rule. Claude (Cowork and Claude in Chrome) is made by Anthropic, whose Claude models help draft our reviews.

esc
↑↓ move↵ openesc closeType a product, a job or a question

Keyboard shortcuts

CtrlK
search everything
/
search everything
gr
reviews: all AI, scored
gg
start here
gu
guides
gw
step-by-step workflows
gt
try-it tools
gs
setup
ga
about
[ ]
previous and next entry, or collection
t
theme: auto, light, dark
?
this sheet