Directory / Devin
Devin
Sessions run in isolated environments, with a single-tenant VPC option for enterprise. Secrets are encrypted and scoped to org, user, repo or session. Audit logs are exposed through enterprise API permissions.
Lock this down first
Scope secrets to the repo or session that needs them instead of the whole org.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 2/3 | |
| Human approval gates | Unverified | Not confirmed in the docs we checked. |
| Sandboxing | 2/3 | |
| Secrets handling | 3/3 | |
| Audit logs | 2/3 | Enterprise API has a ViewAccountAuditLogs permission. |
| Kill switch / interrupt | 2/3 | Archiving a session puts it to sleep. Available via API. |
| Network egress control | 3/3 | Security Profiles take a network allowlist; all other outbound traffic is blocked. |