terminal
Factory.ai
Configurable agents across the command line, desktop, web, mobile, Slack, Teams, Jira, Linear and CI. Four autonomy levels run from read-only up to High, where high-risk actions run unless a safety check stops them.

asks before each actionFactory’s Droids work from the command line, desktop, web, mobile, Slack and Teams, up to Missions for long-running work. ML.ai works in your editor and asks before each action.
Factory, Droids at set autonomy
How Factory.ai works

inside the editor you already use

Build
Fix the failing checkout test
Read cart.ts and cart.test.ts
Traced the failure to line 41
Edit checkout/cart.ts?
1 line changed, diff open on the left
A Droid works at the autonomy level you set. ML.ai routes each step and stops for your approval before it edits.
Same request, both products
“Fix the failing test”
1Droid reads the repo
2Edits files
3Runs commands
1Routes each step
Read and traceFast model
Write the fixFlagship model
Run the testsPassed
2Asks before the edit
terminal
Configurable agents across the command line, desktop, web, mobile, Slack, Teams, Jira, Linear and CI. Four autonomy levels run from read-only up to High, where high-risk actions run unless a safety check stops them.
composer
An agent in VS Code, Cursor and a desktop app. Explore and Architect read and plan without changing code, Build makes the change, and each action waits for your approval by default.
Use this if
You want to hand off well-defined tasks end to end, from Slack, Linear or CI, and you’re willing to set autonomy levels and blocklists so they run unattended.
Use this if
You want each edit and command to wait for your approval by default, inside the editor, with a measured benchmark result behind the agent.
The same categories, row by row. Every line on both sides comes from a doc, pricing page or published benchmark.
Factory.ai
Configurable agents ("Droids") across the command line, desktop, web, mobile, Slack, Teams, Jira, Linear and CI.
![]()
ML.ai
An agent in a VS Code and Cursor extension and a desktop app.
Build and Plan run the session, with General, Explore, Architect and Plan subagents.
Factory.ai
Missions handle long-running, multi-phase work.
![]()
ML.ai
Background runs delegate a job to its own session, labeled "can change files" or "read-only".
Factory.ai
Set per use: Off (read-only), Low (edits and low-risk commands), Medium (reversible changes, commits) or High (high-risk actions unless a safety check requires approval).
![]()
ML.ai
Ask is the default: each action waits for Allow, Always or Deny, with a diff before supported edits.
Auto answers for you, and sudo or deletes that can’t be proven safe are refused in every mode.
Factory.ai
Commands are risk-tiered against the autonomy level.
A blocked command is refused with no approval path, even with --skip-permissions-unsafe.
![]()
ML.ai
Every shell command is classified by what it does before it runs.
In Ask mode, Git writes are refused, and reading ~/.ssh keys or ~/.aws/credentials is always refused.
Factory.ai
Pro $20, Plus $100 and Max $200 a month.
Teams is $60 a month plus $40 per seat. Business and Enterprise are through sales.
![]()
ML.ai
Infinite $10, Infinite Pro $20 and Infinite Max $40 a month, priced by jobs in parallel (2, 6 or 20).
India pays in rupees. Team is $29 per seat a month, billed annually with a 5-seat minimum. Enterprise is a custom contract with self-hosted or VPC deployment.
Factory.ai
SOC 2 (Type I, per its announcement), ISO 42001, GDPR and CCPA, per its security page.
![]()
ML.ai
SOC 2 and ISO 27001, as listed on ml.ai.
ML.ai’s own limits sit beside theirs, with the same weight.
At High autonomy, high-risk actions run without a prompt unless a safety check intervenes, so the setting has to be right before the run starts.
Factory’s security page lists SOC 2 Type I, which checks controls at one point in time.
Type II checks them over a period.
The public pricing page doesn’t mention a free trial.
Partly. ML.ai’s Auto mode answers approvals for you, but sudo and deletes that can’t be proven safe are still refused, and there’s no CLI or CI mode to start a run without the editor or desktop app.
In Ask, the default, writes, network access and running programs ask first, and Git writes are refused. Read-only commands run without a prompt.
ML.ai’s individual plans are $10, $20 and $40 a month, and Team is $29 per seat. Factory’s start at $20 a month, and Teams is $60 a month plus $40 per seat.

in the editor you already useInstall the extension or the desktop app, sign in once, and approve every change it makes.