Verdict
Jules suits individual developers on GitHub who want to hand off scoped work like bug fixes, tests and dependency bumps and review a pull request later, starting free at 15 tasks a day 1,3. The catch: paid plans only work on personal @gmail.com accounts, GitHub is the only code host, and the public changelog has been quiet since March 2026 3,4,13.
Good fit if you are
- Solo developers and open-source maintainers on GitHub who want bug fixes, tests and dependency updates done in the background
- Developers already paying for Google AI Pro or Ultra
- Developers who want to trigger agent tasks from scripts, schedules or the terminal
Look elsewhere if you are
- Companies that need Workspace or enterprise accounts, admin controls or compliance reports
- Teams on GitLab, Bitbucket or self-hosted git
- Developers who want an interactive, local pair-programming agent
Pros and cons
What we like
- A free plan gives 15 tasks a day and 3 at once; Pro and Ultra raise that to 100 and 15, or 300 and 60 3.
- Each task runs in a fresh Ubuntu VM that clones the repo, installs dependencies and runs tests 5,6.
- You approve the plan, review diffs and publish a branch or PR, and Jules then answers PR comments and fixes failed GitHub Actions checks on its own PRs 4,7,8.
- Scheduled and suggested tasks, a REST API and the Jules Tools CLI let you run it on a schedule, from scripts or from the terminal 4,9.
- MCP connections cover Linear, Stitch, Neon, Tinybird, Context7 and Supabase 4.
What to watch
- Paid plans are sold only through Google AI subscriptions on personal @gmail.com accounts; business users get an interest form 3.
- Works only with GitHub repositories or repoless sessions 4,13.
- If you navigate away, Jules auto-approves its plan on a timer 7.
- Security guidance is limited to an FAQ that makes you responsible for code run in its internet-connected VM 5.
- The public changelog has had no entries since March 9, 2026, and the FAQ still calls Jules a public beta 4,5.
Key facts
| Made by | |
|---|---|
| Pricing | Free (15 tasks/day); Google AI Pro $19.99/month; Ultra from $99.99/month |
| Cost per developer | $20 a month (Google AI Pro, billed monthly, for 100 tasks a day) |
| Also requires | Needs a Google account (18+) and GitHub repositories; paid tiers need a Google AI plan on a personal @gmail.com account |
| Where it runs | Web app, Cloud (background), GitHub, Terminal |
| AI models | Gemini models only: Gemini 3 Flash as the base model on all tiers and Gemini 3.1 Pro as the default for Pro users 4 |
| Works with | GitHub, GitHub Actions, Render, Linear, Supabase, Neon, Context7 |
| Security reports | Not published |
| Free trial | Free plan with 15 tasks a day |
What Jules is
Jules is Google's asynchronous coding agent. You give it a task on a GitHub repository; it clones the code into a cloud VM, proposes a plan, makes the changes and hands back a diff and pull request while you do something else 1,12. Google Labs opened a public beta at I/O in May 2025 and took Jules out of beta in August 2025 4,12.
Since then Google has added the Jules Tools CLI, a public REST API, memory, scheduled and suggested tasks, MCP connections and automatic fixes for failed CI checks 4,13. The newest changelog entry, from March 9, 2026, made Gemini 3.1 Pro the default for Pro users 4. Google's I/O 2026 developer highlights focused on Antigravity and did not mention Jules 17.
What it can do
You sign in with a Google account, connect GitHub repositories, pick a branch and describe the task, or add the "jules" label to a GitHub issue 1,2. Each task runs in a fresh, short-lived Ubuntu VM with Node.js, Bun, Python, Go, Java, Rust and Docker preinstalled; Jules studies the repo, reads AGENTS.md or the README, or runs your setup script 2,6. The VM has internet access, and Jules can browse the web and test web apps 4,5.
Jules writes a plan you can revise in chat and approve. If you navigate away it auto-approves on a timer, and a Planning Critic agent reviews auto-approved plans 4,7. Changes appear as mini diffs and a full diff view before you publish a branch or PR 8. Jules reads PR comments, fixes failed GitHub Actions checks on its own PRs, and can commit as itself, as you, or as co-author 4. The Jules Tools CLI (npm install -g @google/jules) starts remote sessions from the terminal and pulls results back, and the v1alpha REST API creates sessions from scripts, including repoless ones 4,9.
- Actions. Jules clones the repo into a cloud VM, writes a plan, edits code across files, runs tests and publishes a branch or pull request 1,6,8. It can browse the web, test web apps, fix failed CI checks and Render build failures on its PRs, and run scheduled or suggested tasks 4,10.
- Setup. Sign in with a Google account, connect GitHub repositories, pick a branch and write a prompt, or label a GitHub issue "jules" 1,2. Jules reads AGENTS.md or the README to set up its VM, and an optional setup script handles complex builds 2,6.
- Reviewing its changes. You approve the plan, review a mini diff or full diff view, then publish a branch or PR authored by Jules, by you, or by both 4,7,8.
- Analytics. Each task ends with a summary of files changed, lines modified, runtime and branch; no team analytics are documented 8.
Pricing
Jules has no standalone price. The free plan gives 15 tasks per rolling 24 hours and 3 at once 3. Jules in Pro comes with Google AI Pro at $19.99 a month: 100 tasks a day, 15 concurrent and Gemini 3.1 Pro 3,4,11. Jules in Ultra comes with Google AI Ultra, sold at $99.99 or $199.99 a month after Google added a $100 tier and cut the top tier from $250 at I/O 2026, with 300 tasks a day and 60 concurrent 3,11,14. There is no overage: at the cap you wait for the rolling window to reset or upgrade 3. Paid plans only work on personal @gmail.com accounts, and each family-plan member gets separate limits 3. For daily professional use, Pro at $19.99 is the realistic cost.
| Plan | Price | Includes |
|---|---|---|
| Jules (free) | $03,4 | 15 tasks per rolling 24 hours, 3 concurrent tasks, Gemini 3 Flash base model |
| Jules in Pro | $19.99/month (Google AI Pro)3,4,11 | 100 tasks per day, 15 concurrent tasks, Gemini 3.1 Pro as default model |
| Jules in Ultra | $99.99 or $199.99/month (Google AI Ultra)3,11 | 300 tasks per day, 60 concurrent tasks, priority access to the latest model |
Security and data
Jules runs your code in Google's cloud VMs and leaves the safety of that code to you: the FAQ asks you to keep secrets out of repos and be careful with third-party packages 5. Google says Jules does not train on private repository content 5, and told TechCrunch in 2025 that data from public repositories may be used for training 12. Google publishes no certifications, retention terms or data-residency options for Jules, and paid plans cover personal accounts only 3. Embrace The Red reported in 2025 that prompt injection could make Jules leak data or take remote commands, and that outbound network access was not sandboxed by default 15,16.
What customers say
Google names no Jules customers. Its own figures say thousands of beta users ran tens of thousands of tasks and produced over 140,000 public code improvements 12. SimilarWeb data reviewed by TechCrunch counted 2.28 million visits during the beta, 45% of them from mobile, and Google says its main users are AI enthusiasts and professional developers 12. Independent security research found data-exfiltration and remote-control flaws in 2025 15,16.
What Google claims (not independently verified):
- During the beta, thousands of developers ran tens of thousands of tasks, producing over 140,000 public code improvements 12
- The Planning Critic cut task failure rates by 9.5% 4
Concerns raised by others:
- Embrace The Red showed in August 2025 that prompt injection could make Jules leak data through image rendering and its web-reading tool, and said the weaknesses were not entirely mitigated 15.
- A second Embrace The Red report showed prompt injection turning Jules into a remotely controlled "zombie" agent 16.
How we scored it
| Criterion | Why | Score |
|---|---|---|
| What it can do 30% of the total | Jules plans, edits multiple files, runs tests in a cloud VM, fixes failed CI checks and opens pull requests, with MCP tools 4,6,8, but it is cloud-only: the CLI and API start remote sessions rather than running locally 9. | 4/5 |
| Pricing 20% of the total | Free, Pro and Ultra plans and their task and concurrency limits are public in numbers 3,11, but there is no overage option and no business plan 3. | 4/5 |
| Control 20% of the total | Tasks run in isolated VMs, plans wait for approval unless auto-approved, and changes land as diffs and PRs 5,7,8, but no command allow-lists, checkpoints, org policies or audit logs are documented 3. | 3/5 |
| Security and data 15% of the total | Google says Jules does not train on private repositories 5, but names no SOC 2 or ISO report, retention terms or residency options for Jules, and public-repo data may be used for training 12. | 2/5 |
| Customer evidence 15% of the total | Proof rests on Google's own beta figures with no named customers 12, and the main independent evidence is 2025 research showing data-exfiltration and remote-control flaws 15,16. | 2/5 |
| Total | Weighted sum of the 5 levels, out of 10. | 6.4 |
Sources
- Jules - An Autonomous Coding Agent
- Getting started
- Limits and Plans
- Changelog
- FAQ
- Environment setup
- Reviewing plans & giving feedback
- Reviewing code changes
- Jules Tools Reference
- Integrations
- Google AI Pro & Ultra subscriptions (US)
- Google's AI coding agent Jules is now out of beta
- Google's Jules enters developers' toolchains as AI coding agent competition heats up
- Google launches Antigravity 2.0 with an updated desktop app and CLI tool at IO 2026
- Google Jules: Vulnerable to Multiple Data Exfiltration Issues
- Jules Zombie Agent: From Prompt Injection to Remote Control
- I/O 2026 developer highlights: Antigravity, Gemini API, AI Studio