FRENES

Computer use · agent infrastructure component

Cua: review, pricing, security and alternatives

Cua is an open-source agent infrastructure component published by Cua, in the computer use family. Cua provides drivers, isolated environments, and benchmarks for developing and evaluating computer-use agents. Its repository has 30,856 stars and its last commit is from October 24, 2026.

Open sourceSelf-hostableActively maintainedHigh risk

What Cua does

Cua belongs to the computer use family: agents that see the screen and drive the keyboard and mouse of a computer or phone. On our grid it ranks #2 of the 17 projects of this family listed in the directory.

It is not an agent in itself: it is a component other agents use (memory, isolated execution, web access, model gateway or monitoring). You pick it based on the agent or framework it has to equip.

You use it from: developer SDK and API. It can run on your own machine or server.

Who is Cua for?

It is for people who want to automate desktop software with no API, by driving the screen as a person would. Typical tasks people give it:

  • chain actions in legacy business software
  • copy data from one application to another
  • test a desktop application

It is a good candidate if your data must stay on your machines.

Access and human control

According to its documentation, Cua can:

  • control the screen, keyboard and mouse

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

Run commands in a terminalRun commands in a terminal : 6 %6 %Read and edit filesRead and edit files : 12 %12 %Drive a web browserDrive a web browser : 35 %35 %Control the screen, keyboard and mControl the screen, keyboard and m : 88 %88 %
Share of the 17 agents in the family that have each access, according to their documentation. In orange, Cua's access.

Cua pricing

The code is free, under the MIT licence.

Getting started with Cua

  1. Install it: the project ships as a compiled Rust binary (direct download or cargo install). The exact command is in the repository README.
  2. Start with the minimal example from the docs, then add one tool at a time and check what the agent does with it.
  3. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

An agent that controls the computer has the same rights as you: run it in a dedicated virtual machine.

Points found for Cua:

  • Sensitive access: it can control the screen, keyboard and mouse, with no established default human approval.

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Project activity and releases

Created on January 31, 2025, the trycua/cua repository has 30,856 stars, 2,250 forks and 667 open issues, with 5,863 commits in total. It received changes this month.

Over the last 52 weeks: 3,886 commits, an average of 74.7 per week.

Nov 2, : 67 · Nov 2, 2025Nov 2,Nov 9, : 9 · Nov 9, 2025Nov 16, : 108 · Nov 16, 2025Nov 23, : 95 · Nov 23, 2025Nov 30, : 18 · Nov 30, 2025Dec 7, : 51 · Dec 7, 2025Dec 14, : 32 · Dec 14, 2025Dec 21, : 41 · Dec 21, 2025Dec 28, : 27 · Dec 28, 2025Dec 28,Jan 4, : 43 · Jan 4, 2026Jan 11, : 64 · Jan 11, 2026Jan 18, : 111 · Jan 18, 2026Jan 25, : 106 · Jan 25, 2026Feb 1, : 33 · Feb 1, 2026Feb 8, : 94 · Feb 8, 2026Feb 15, : 55 · Feb 15, 2026Feb 22, : 11 · Feb 22, 2026Feb 22,Mar 1, : 56 · Mar 1, 2026Mar 8, : 19 · Mar 8, 2026Mar 15, : 7 · Mar 15, 2026Mar 22, : 25 · Mar 22, 2026Mar 29, : 49 · Mar 29, 2026Apr 5, : 25 · Apr 5, 2026Apr 12, : 11 · Apr 12, 2026Apr 19, : 28 · Apr 19, 2026Apr 19,Apr 26, : 35 · Apr 26, 2026May 3, : 51 · May 3, 2026May 10, : 8 · May 10, 2026May 17, : 19 · May 17, 2026May 24, : 117 · May 24, 2026May 31, : 85 · May 31, 2026Jun 7, : 41 · Jun 7, 2026Jun 14, : 15 · Jun 14, 2026Jun 14,Jun 21, : 42 · Jun 21, 2026Jun 28, : 81 · Jun 28, 2026Jul 5, : 15 · Jul 5, 2026Jul 12, : 64 · Jul 12, 2026Jul 19, : 113 · Jul 19, 2026Jul 26, : 122 · Jul 26, 2026Aug 2, : 134 · Aug 2, 2026Aug 9, : 131 · Aug 9, 2026Aug 9,Aug 16, : 144 · Aug 16, 2026Aug 23, : 101 · Aug 23, 2026Aug 30, : 67 · Aug 30, 2026Sep 6, : 64 · Sep 6, 2026Sep 13, : 125 · Sep 13, 2026Sep 20, : 39 · Sep 20, 2026Sep 27, : 122 · Sep 27, 2026Oct 4, : 272 · Oct 4, 2026Oct 4,Oct 11, : 148 · Oct 11, 2026Oct 18, : 297 · Oct 18, 2026Oct 25, : 249 · Oct 25, 2026Oct 25,
Commits per week on the main repository, last 52 weeks (GitHub API, checked October 25, 2026).

801 releases in total; 21 in the last twelve months. Latest release: cua-spacesd-v0.8.0, on October 24, 2026.

cua-spaces-v0.9.2 · Oct 15, 2026cua-spaces-v0.9.2Oct 15, 2026cua-sdk-v0.4.2 · Oct 15, 2026cua-sdk-v0.4.4 · Oct 16, 2026cua-spaces-v0.9.3 · Oct 16, 2026cua-sdk-v0.4.3 · Oct 16, 2026cua-spaces-v0.9.4 · Oct 18, 2026sandbox-v0.9.1 · Oct 19, 2026cua-sdk-v0.5.0 · Oct 19, 2026bench-v0.3.1 · Oct 19, 2026agent-v0.9.1 · Oct 19, 2026cua-spacesd-v0.6.0 · Oct 20, 2026cua-spaces-v0.12.0 · Oct 20, 2026cua-spaces-v0.11.0 · Oct 20, 2026cua-spacesd-v0.7.0 · Oct 21, 2026cua-sdk-v0.7.0 · Oct 21, 2026cua-spaces-v0.12.1 · Oct 21, 2026cua-sdk-v0.6.0 · Oct 21, 2026cua-spaces-v0.13.1 · Oct 22, 2026cua-spaces-v0.13.0 · Oct 22, 2026cua-spacesd-v0.8.0 · Oct 24, 2026cua-spacesd-v0.8.0Oct 24, 2026
The latest 20 releases published on GitHub (hover a point for details).

Cua vs other computer use

GitHub stars of the best-rated open-source projects in the computer use family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.

MidsceneMidscene : 15.4K15.4KCuaCua : 30.9K30.9KMobilerunMobilerun : 9.8K9.8KGenericAgentGenericAgent : 14.3K14.3KOpenBotOpenBot : 7K7KUI-TARS DesktopUI-TARS Desktop : 39.4K39.4KOpenMausBotOpenMausBot : 5.5K5.5KObserverObserver : 1.7K1.7K
Log scale; Cua in orange. Checked October 25, 2026.

Cua and other computer use at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

Quick comparison: computer use
AgentModelScoreStars or entry priceSelf-hostableHuman approval
Cuaopen source8030.9K ★yes–
Midsceneopen source8115.4K ★yes–
Mobilerunopen source799.8K ★yes–
GenericAgentopen source7314.3K ★yes–
OpenBotopen source727K ★yes–
UI-TARS Desktopopen source7139.4K ★yes–
OpenMausBotopen source715.5K ★yes–
Observeropen source701.7K ★yes–

How we rated it

Score: 80/100, computed only from public, verifiable data, with no subjective testing or partnership:

  • Adoption 30/40: 30,856 stars on a log scale (40 points from about 200,000).
  • Activity 30/30: last commit less than a month ago, 21 releases in six months, 3,886 commits in a year.
  • Framework 20/30: licence, default human approval, self-hosting, model choice and documentation site.

The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.

Verdict

Cua is one of the most solid projects in its family: followed, active and well framed.

Strengths

  • Widely followed: 30.9K stars
  • Very active development
  • Frequent releases (21 in a year)
  • Can run on your side: data under control
  • Permissive licence (MIT)

Limitations

  • Broad access without default approval

Avoid if…

  • You cannot isolate it (container, virtual machine)

Frequently asked questions

Is Cua free?

The software is free (MIT licence). You still pay for the model calls, unless you use a local model.

Is Cua safe?

Our risk level: high. Points found: sensitive access. Give it minimum rights and approve irreversible actions.

Which models does Cua use?

Its documentation does not specify the supported models.

Can Cua be installed on your own server?

Yes, from the trycua/cua repository. Data then stays with you, but security and updates are your job.

What are the alternatives to Cua?

In the same family: Midscene, Mobilerun, GenericAgent, and OpenBot.

Cua or Midscene: what is the difference?

Both belong to the computer use family. Cua has 30.9K stars against 15.4K for Midscene. The right choice mostly depends on the access you are willing to give it.

Related articles

Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score