Home / How we rate

How we rate AI agents

Every tool gets a level from 1 to 5 on each criterion. Each level has a written rule, so two people applying it should land on the same score. The weighted total is the score out of 10.

What we look at

We read the vendor's documentation, pricing page, security and trust pages, changelog and terms. We check independent review platforms (G2, Capterra, Gartner Peer Insights, app marketplaces), public benchmark leaderboards and news coverage, and record each rating with the number of reviews and the date we saw it. Every claim in a review links to its source. Numbers that vendors publish about themselves, such as resolution rates or benchmark scores they ran, are shown as claims and never count towards a score.

We have not run these tools on our own workloads yet. Scores reflect what each vendor documents and what independent reviewers report; hands-on testing is planned.

Pricing, security and customer evidence follow the same rules in every category. "What it can do" and "Control" are written per category, because a coding agent and a support agent do different jobs. Where an independent tester runs hands-on tests across a category, as G2 now does for customer support agents, those results become their own criterion and carry the most weight.

Customer support

Independent tests · 30%

How did it do when an independent tester gave it real support tasks?

LevelRule
5A top-3 place on a leaderboard from a hands-on test G2 ran itself.
4The top half of a G2-run leaderboard, or a score of 70 or more out of 100.
3Tested by G2 with middling results: the middle of the leaderboard, a score of 60–69.
2No hands-on test run by G2 (declined, not evaluated, or a partner benchmark only), or the bottom third of a G2-run test or a score below 60.
1Scored below 40 out of 100 in a hands-on test G2 ran itself.

Only tests G2 runs itself count, because G2 asks readers not to compare its own results with partner benchmarks. When G2's views of the same agent disagree, we average the level each view gives and round down. This level is calculated from G2's published results, not set by hand.

What it can do · 20%

Can it resolve problems, not just answer questions, on the channels your customers use?

LevelRule
5Takes real actions in other systems on chat, email and voice, in 30+ languages.
4Takes real actions in other systems; chat and email, voice missing or limited.
3Answers plus limited actions, often only inside its own help desk; chat and email.
2Answers from a knowledge base, on one main channel.
1Scripted flows or very limited answers.

Pricing · 15%

Can you work out what you will pay before talking to sales?

LevelRule
5Full public price list including the AI unit price, with limits stated in numbers and no hidden minimum.
4Public AI unit price, but it needs a paid base plan, seats or a stated minimum, or usage limits are vague.
3Partly public: an entry tier is listed, larger tiers are by quote.
2No public price; only indicative or third-party figures.
1No price information anywhere.

Control · 15%

Can your team test it, set rules, hand off to people and see how it is doing?

LevelRule
5All five: testing before launch, guardrails, configurable handoff, quality analytics, versioning or approvals.
4Four of: testing before launch, guardrails, configurable handoff, quality analytics, versioning or approvals.
3Basic configuration, handoff to people and reports.
2Minimal configuration.
1A black box.

Security and data · 10%

Is your data handled to a standard you can show an auditor?

LevelRule
5SOC 2 Type II, ISO 27001 or 42001, HIPAA or data residency, and a clear no-training policy.
4SOC 2 Type II plus one of: ISO 27001/42001, HIPAA or data residency, a clear no-training policy.
3SOC 2 only, or an unclear policy on training with your data.
2Security claims without named reports.
1Nothing published.

Customer evidence · 10%

Do independent reviews and named customers back up the vendor's story?

LevelRule
5Rating of 4.5+ from 200+ reviews of this product itself, and named public customers. Ratings that cover only a parent platform count at most as level 4.
4Rating of 4.3+ from 50+ reviews, or strong named customer stories with numbers.
3Some independent reviews (fewer than 50) or a rating of 4.0–4.3.
2Few or no independent reviews; vendor claims only.
1Negative independent evidence: outages, security incidents, legal action, widespread complaints.

Level 1 applies when negative evidence outweighs the positive, for example when the review platform with the most reviews (100 or more) rates the product below 3.0. Security incidents, outages and lawsuits that do not outweigh the positive evidence are listed under concerns in each review.

Coding agents

What it can do · 30%

Can it take a task from plan to pull request on its own, locally and in the background?

LevelRule
5End to end on its own: plans, edits, runs tests, fixes failures and opens a pull request, locally and in the background, extensible with MCP or tools.
4Autonomous multi-file edits that run commands and tests, but local only or cloud only.
3Multi-file edits with step-by-step approval; limited command running.
2Single-file edits or chat answers.
1Autocomplete only.

Pricing · 20%

Can you work out what you will pay before talking to sales?

LevelRule
5Full public price list including the plan prices, with limits stated in numbers and no hidden minimum.
4Public plan prices, but it needs a paid base plan, seats or a stated minimum, or usage limits are vague.
3Partly public: an entry tier is listed, larger tiers are by quote.
2No public price; only indicative or third-party figures.
1No price information anywhere.

Control · 20%

Can a developer or a team decide what it may do, and undo it?

LevelRule
5All five: granular permission modes, sandboxed execution, diff review or PR-only workflow, checkpoints or undo, org policies and audit logs.
4Four of those five.
3Three of those five.
2One or two of: permission modes, sandboxing, diff review or PR-only workflow, checkpoints, org policies and audit logs.
1No controls documented.

Security and data · 15%

Is your data handled to a standard you can show an auditor?

LevelRule
5SOC 2 Type II, ISO 27001 or 42001, a zero-data-retention option, and a clear no-training policy.
4SOC 2 Type II plus one of: ISO 27001/42001, a zero-data-retention option, a clear no-training policy.
3SOC 2 only, or an unclear policy on training with your data.
2Security claims without named reports.
1Nothing published.

Customer evidence · 15%

Do independent reviews and named customers back up the vendor's story?

LevelRule
5Rating of 4.5+ from 200+ reviews of this product itself, or a top result on an independent benchmark, and named public customers. Ratings that cover only a parent platform count at most as level 4.
4Rating of 4.3+ from 50+ reviews, or a published independent benchmark result, or strong named customer stories with numbers.
3Some independent reviews (fewer than 50) or a rating of 4.0–4.3.
2Few or no independent reviews; vendor claims only.
1Negative independent evidence: outages, security incidents, legal action, widespread complaints.

Level 1 applies when negative evidence outweighs the positive, for example when the review platform with the most reviews (100 or more) rates the product below 3.0. Security incidents, outages and lawsuits that do not outweigh the positive evidence are listed under concerns in each review.

Voice agents

What it can do · 30%

Can it hold a real phone conversation and get the caller's task done, on inbound and outbound calls?

LevelRule
5Everything in level 4, plus all three: 30+ languages, batch outbound campaigns, and the same agent on SMS or chat.
4Calls your own APIs or tools during the call to act in other systems, on inbound and outbound calls, with transfer to a person.
3Inbound and outbound calls with built-in actions only, such as booking a slot or transferring the call.
2Answers questions by phone from a knowledge base; no actions in other systems.
1Phone menus or a fixed call script.

Pricing · 20%

Can you work out what you will pay before talking to sales?

LevelRule
5Full public price list including the per-minute price, with limits stated in numbers and no hidden minimum.
4Public per-minute price, but it needs a paid base plan, seats or a stated minimum, or usage limits are vague.
3Partly public: an entry tier is listed, larger tiers are by quote.
2No public price; only indicative or third-party figures.
1No price information anywhere.

Control · 20%

Can your team test calls before launch, set rules and review every call?

LevelRule
5All five, plus team roles and audit logs.
4Four of those five.
3Three of those five.
2One or two of: simulated test calls before launch, versioning or approvals, guardrails or redaction of personal data, configurable transfer rules, call review with transcripts and post-call analysis.
1No controls documented.

Security and data · 15%

Is your data handled to a standard you can show an auditor?

LevelRule
5SOC 2 Type II, ISO 27001 or 42001, a HIPAA BAA or data residency, and a clear no-training policy.
4SOC 2 Type II plus one of: ISO 27001/42001, a HIPAA BAA or data residency, a clear no-training policy.
3SOC 2 only, or an unclear policy on training with your data.
2Security claims without named reports.
1Nothing published.

Customer evidence · 15%

Do independent reviews and named customers back up the vendor's story?

LevelRule
5Rating of 4.5+ from 200+ reviews of this product itself, and named public customers. Ratings that cover only a parent platform count at most as level 4.
4Rating of 4.3+ from 50+ reviews, or strong named customer stories with numbers.
3Some independent reviews (fewer than 50) or a rating of 4.0–4.3.
2Few or no independent reviews; vendor claims only.
1Negative independent evidence: outages, security incidents, legal action, widespread complaints.

Level 1 applies when negative evidence outweighs the positive, for example when the review platform with the most reviews (100 or more) rates the product below 3.0. Security incidents, outages and lawsuits that do not outweigh the positive evidence are listed under concerns in each review.

App builders

What it can do · 30%

Can it go from a description to a working, published app, and fix its own mistakes?

LevelRule
5Everything in level 4, plus native iOS and Android apps it can send to the app stores, and connectors you can extend with MCP or your own APIs.
4Full-stack web apps plus an agent that tests the running app and fixes its own errors, and built-in payments or connectors to outside services.
3Full-stack web apps with a database, sign-in and one-click publishing.
2Front-end code or single pages; the database, sign-in and hosting are left to you.
1Mockups or templates only; no working app.

Pricing · 20%

Can you work out what you will pay before talking to sales?

LevelRule
5Full public price list including the plan prices, with limits stated in numbers and no hidden minimum.
4Public plan prices, but it needs a paid base plan, seats or a stated minimum, or usage limits are vague.
3Partly public: an entry tier is listed, larger tiers are by quote.
2No public price; only indicative or third-party figures.
1No price information anywhere.

Control · 20%

Do you own the code, and can you undo changes and keep a live app safe?

LevelRule
5All five.
4Four of those five.
3Three of those five.
2One or two of: direct code editing, two-way GitHub sync or full code export, version history with restore, separate test and live environments, team roles with single sign-on.
1No controls documented.

Security and data · 15%

Is your data handled to a standard you can show an auditor?

LevelRule
5SOC 2 Type II, ISO 27001 or 42001, a built-in security scan of the apps it builds, and a clear no-training policy.
4SOC 2 Type II plus one of: ISO 27001/42001, a built-in security scan of the apps it builds, a clear no-training policy.
3SOC 2 only, or an unclear policy on training with your data.
2Security claims without named reports.
1Nothing published.

Customer evidence · 15%

Do independent reviews and named customers back up the vendor's story?

LevelRule
5Rating of 4.5+ from 200+ reviews of this product itself, and named public customers. Ratings that cover only a parent platform count at most as level 4.
4Rating of 4.3+ from 50+ reviews, or strong named customer stories with numbers.
3Some independent reviews (fewer than 50) or a rating of 4.0–4.3.
2Few or no independent reviews; vendor claims only.
1Negative independent evidence: outages, security incidents, legal action, widespread complaints.

Level 1 applies when negative evidence outweighs the positive, for example when the review platform with the most reviews (100 or more) rates the product below 3.0. Security incidents, outages and lawsuits that do not outweigh the positive evidence are listed under concerns in each review.

From levels to a score

Each level is divided by 5 and multiplied by the criterion's weight; the five results add up to 100 points, shown as a score out of 10 with one decimal. Ties are ordered by customer evidence, then by name.

ScoreLabel
9.0 – 10Outstanding
8.0 – 8.9Excellent
7.0 – 7.9Very good
6.0 – 6.9Good
5.0 – 5.9Fair
below 5.0Weak

Independence

No vendor pays for a rating, a position or a review. We do not use affiliate links. Vendors can send corrections with a public source, and we update the review and its date.