Oz vs Runbear (2026)

Oz

by Anyreach

Runbear

by Runbear, Inc.

Pros

• ✓Oz delivers finished work rather than chat replies: ask it in plain language from Slack, Teams, Gmail, Outlook, a call, or the web, and it returns research briefs, slide decks, spreadsheets, and pipeline updates across your connected tools in a single run. Pricing is outcome-metered rather than token-based, so a credit maps to a unit of work done and costs stay legible.
• ✓Human control is built into every consequential action: reads run silently, while every send, payment, merge, or delete posts a one-tap Approve or Reject card. Teams can set which lower-risk actions auto-approve, which makes Oz a strong fit for security-conscious teams that want autonomy without handing over unattended write access.
• ✓Unusually deep integration and security posture for an early-stage product. It offers 3,000+ integrations with named bidirectional connectors like Salesforce, HubSpot, Stripe, GitHub, and Notion, plus an API-first design and a first-party MCP server that external clients such as Claude or Cursor can query. It is backed by an independently audited SOC 2 Type II report, HIPAA, and AIUC-1, and customer content is never used to train foundation models.

Limitations

• –Credit-metered pricing means the $33 Solo seat is a floor, not a ceiling: the 800 included credits are a soft budget and heavy users pay per-credit overage on top of the seat fee.
• –No independent track record yet: Oz is an early-access product from a 2024 company with no third-party reviews on G2, Trustpilot, or Product Hunt, so buyers cannot yet triangulate quality.
• –Several controls are gated or pending: shared memory, SSO, and pipeline access require higher tiers, and GDPR, ISO 27001, and PCI DSS are still in progress on the trust center, not certified.

Pros

• ✓Works in both MCP directions, acting as a client through managed and custom MCP servers and exposing its own hosted MCP server for Claude Code, Claude Desktop, Cursor, VS Code, Windsurf and Zed.
• ✓Credit-based pricing with no per-seat charge, so cost tracks usage rather than headcount, and both published tiers list their exact credit allowance and the pay-as-you-go rate beyond it.
• ✓Per-user authorization on shared agents plus a SIEM-exportable audit log, SOC 2 Type II, HIPAA support for eligible Enterprise customers under a BAA, and a stated commitment that customer data is not used for model training.

Limitations

• –The MCP server is in early access with an expanding tool set, and the vendor states some agent settings remain dashboard-only. It also requires an MCP client that supports remote servers with OAuth.
• –HubSpot and Zendesk deployment, CRM integrations and bring-your-own-key models start on Business, at four times the Team rate, so a support or revenue team that needs its CRM in the loop starts at $319 per month billed yearly.
• –Independent evidence is limited to a small number of G2 and Product Hunt reviews, with no Capterra or Trustpilot presence, and the SOC 2 Type II report is available only on request.