Automation · AI agent
Suna: review, pricing, security and alternatives
Suna is an open-source AI agent published by Kortix, in the automation family. A general-purpose agent with an execution environment for browsing the web, handling files and automating tasks. Its repository has 20,308 stars and its last commit is from October 24, 2026.
What Suna does
Suna belongs to the automation family: platforms, often visual, that chain steps, apps and models into workflows with or without an agent. On our grid it ranks #9 of the 26 projects of this family listed in the directory.
You use it from: web app and API. Usable models: Claude (Anthropic), GPT (OpenAI), and any OpenAI-compatible model. It can run on your own machine or server.
Who is Suna for?
It is for teams that want to connect their tools (CRM, e-mail, spreadsheets) and hand the AI the steps that require reading or deciding. Typical tasks people give it:
- qualify incoming requests and route them
- extract data from documents into a spreadsheet
- generate periodic reports
It is a good candidate if you prefer doing everything in a browser, with no install and your data must stay on your machines.
Access and human control
According to its documentation, Suna can:
- run commands in a terminal
- read and edit files
- drive a web browser
- call online services and APIs
We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.
Suna pricing
The code is public but the repository declares no licence: reuse is not formally allowed. The real cost comes from model calls: each loop step sends the whole context back to the model, and a task of several dozen steps can cost far more than a single question. The LLM price calculator estimates it for the chosen model.
Getting started with Suna
- Install it: the project ships as a Node.js package (install with
npm, or run directly withnpx). The exact command is in the repository README. - Create an API key with the model provider and put it in an environment variable, never in a shared or versioned file.
- Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
- Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.
Security: risk level
A workflow runs unattended: limit the credentials it holds and log what it sends.
Points found for Suna:
- Sensitive access: it can run commands in a terminal, with no established default human approval.
- Outside content: it reads web pages or API responses, which may contain booby-trapped instructions (prompt injection).
- No licence: legally shaky for company use.
Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.
Project activity and releases
Created on October 5, 2024, the kortix-ai/suna repository has 20,308 stars, 3,437 forks and 0 open issues, with 22,423 commits in total. It received changes this month.
Over the last 52 weeks: 19,181 commits, an average of 368.9 per week.
219 releases in total; 26 in the last twelve months. Latest release: v0.14.8, on October 23, 2026.
Suna vs other automation
GitHub stars of the best-rated open-source projects in the automation family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.
Suna and other automation at a glance
The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.
| Agent | Model | Score | Stars or entry price | Self-hostable | Human approval |
|---|---|---|---|---|---|
| Suna | open source | 73 | 20.3K ★ | yes | – |
| Langflow | open source | 93 | 156K ★ | yes | – |
| n8n | open source | 85 | 208.5K ★ | yes | – |
| Sim | open source | 85 | 29.9K ★ | yes | – |
| AutoGPT | open source | 84 | 187.7K ★ | yes | – |
| Dify | open source | 83 | 159.4K ★ | yes | – |
| Kestra | open source | 80 | 30K ★ | yes | – |
| Trigger.dev | open source | 77 | 16.6K ★ | yes | – |
How we rated it
Score: 73/100, computed only from public, verifiable data, with no subjective testing or partnership:
- Adoption 28/40: 20,308 stars on a log scale (40 points from about 200,000).
- Activity 30/30: last commit less than a month ago, 26 releases in six months, 19,181 commits in a year.
- Framework 15/30: licence, default human approval, self-hosting, model choice and documentation site.
The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.
Verdict
Suna is a serious option; check the limitations below before granting it access.
Strengths
- Widely followed: 20.3K stars
- Very active development
- Frequent releases (26 in a year)
- Can run on your side: data under control
- Free choice of model
Limitations
- Broad access without default approval
- No licence declared
Avoid if…
- You cannot isolate it (container, virtual machine)
Alternatives
Learn more
Frequently asked questions
Is Suna free?
The software is public, with no declared licence. You still pay for the model calls, unless you use a local model.
Is Suna safe?
Our risk level: high. Points found: sensitive access, outside content, and no licence. Give it minimum rights and approve irreversible actions.
Which models does Suna use?
According to its documentation: Claude (Anthropic), GPT (OpenAI), and any OpenAI-compatible model.
Can Suna be installed on your own server?
Yes, from the kortix-ai/suna repository. Data then stays with you, but security and updates are your job.
What are the alternatives to Suna?
In the same family: Langflow, n8n, Sim, and AutoGPT.
Suna or Langflow: what is the difference?
Both belong to the automation family. Suna has 20.3K stars against 156K for Langflow. The right choice mostly depends on the access you are willing to give it.
Related articles
- Open source or proprietary AI agent: how to decideOctober 25, 2026
- AI agent vs. chatbot: what's the difference?October 24, 2026
- Autonomous AI agents: how much should you let them do?October 12, 2026
- AI agent memory: how agents remember (and forget)October 11, 2026
Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score