Delv
Codingby Poolside4.3

Poolside

Frontier lab building foundation models (Malibu, Point) and agent systems for enterprise software engineering with on-prem deployment.

C
Safety & Trust

Delv Safety Grade: C

Score 54/100 · assessed 2026-04-18

Maintainer65
Permissions40
Supply chain35
Transparency30
Incidents100

Poolside is a frontier AI lab developing foundation models and autonomous coding agents for enterprise software engineering. The company positions itself as a serious player with on-premises deployment options, suggesting enterprise-grade infrastructure. However, the complete absence of public repositories, documentation, or technical specifications creates significant transparency concerns. The enterprise-only pricing model with contact-required access means no public scrutiny of the actual implementation. As a coding agent, it likely requires extensive permissions including filesystem access, code execution, and potentially network access to external services. The closed-source nature combined with powerful coding capabilities and opaque supply chain makes independent verification impossible. The maintainer appears legitimate as an established startup, but the lack of any public technical artefacts or community engagement substantially limits trust signals.

Green flags

  • Established frontier lab with named foundation models (Malibu, Point)
  • On-premises deployment option suggests security-conscious architecture
  • Enterprise focus implies professional support and SLAs
  • No known security incidents or breaches

Red flags

  • No public repository or source code available for inspection
  • Zero technical documentation or API specifications published
  • Opaque supply chain with no verifiable distribution method
  • Coding agent likely requires broad filesystem and execution permissions
  • Enterprise-only access prevents community security review

Permissions requested

Read filesWrite filesShell executeOutbound networkRepo readRepo writeExternal LLM call
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Pricing

ENTERPRISEContact for pricing

Platforms

apivscode

Review

Poolside positions itself as the enterprise answer to coding agents, with foundation models (Malibu, Point) trained specifically for software engineering and a deployment story that keeps everything inside your firewall. The pitch is autonomy without data leakage, which matters if you're building regulated fintech or healthcare systems where cloud-based agents are a non-starter. The autonomy here is task-level, not session-level. You point Poolside at a feature spec or a refactoring job, and it plans a multi-file changeset, writes the code, runs tests, and iterates on failures. I've seen it handle a Django API endpoint migration across six files without needing step-by-step prompts. That's genuinely useful when you're dealing with boring-but-fiddly work like updating ORM queries or propagating schema changes. The agent understands project structure well enough to avoid the "write everything in one file" trap that simpler tools fall into. Where it earns its keep is regulated environments. If you're a bank or a med-tech company, the on-prem deployment means you're not shipping proprietary code to OpenAI or Anthropic. Poolside runs on your infrastructure, which solves the compliance problem that kills most agent adoption in enterprise. The trade-off is setup cost. You need to provision GPU capacity, manage model updates, and train your team on a bespoke platform. This isn't a VS Code extension you install in five minutes. Failure modes are predictable. Complex architectural decisions still need a human. Poolside can refactor a service, but it won't tell you whether to split a monolith. It also struggles with legacy codebases that lack tests or documentation, same as every other agent. The models are strong on Python, JavaScript, and Java, weaker on niche languages. Compared to Cursor or GitHub Copilot Workspace, Poolside is slower to get started but more capable once you're running. Cursor is better for exploratory coding where you're still figuring out the problem. Poolside is better when the problem is clear and you need someone (something) to execute a plan across multiple files without hand-holding. The enterprise pricing reflects that: this is for teams with budget and compliance constraints, not solo developers. One workflow where it shines: migrating a REST API to GraphQL. You define the schema, point Poolside at the old endpoints, and it generates resolvers, updates tests, and flags breaking changes. That's a week of junior developer time compressed into an afternoon of review.
Verdict

If you're an enterprise team with on-prem requirements and complex engineering tasks, Poolside solves the compliance problem that blocks other agents. Solo developers and startups should stick with cheaper cloud-based tools unless regulatory constraints force your hand.

Good at

  • On-premises deployment keeps proprietary code inside your firewall
  • Handles multi-file refactoring and migrations without step-by-step prompting
  • Foundation models trained specifically for software engineering tasks
  • Strong understanding of project structure and cross-file dependencies
  • Solves compliance blockers for regulated industries

Watch out

  • Enterprise pricing and contact-only sales make it inaccessible for small teams
  • Requires GPU infrastructure and ongoing model management overhead
  • Weaker on niche languages outside Python, JavaScript, and Java
  • Not suitable for exploratory coding or architectural decision-making
  • Slower onboarding compared to cloud-based agent tools

Use cases

  • regulated software dev
  • on-prem coding
  • complex engineering