doesithaveamoat?
Check your startup
PostizRun your social media on autopilot with AI agentsRanlaYour AI growth engineer: Search + Ads + Reddit + EmailYouTube Video Download APIReliable 99.995% success over last 30 daysPostizRun your social media on autopilot with AI agentsRanlaYour AI growth engineer: Search + Ads + Reddit + EmailYouTube Video Download APIReliable 99.995% success over last 30 days
7/10

Shiba

tryshiba.dev

Does Shiba have a moat?

No.

5/100 · Moatless

“An approval-gated coding agent on Cloudflare is a 2-week build. With 6 GitHub stars, Shiba has nothing a clone needs to get past.”

Code to copy

2 weeks

Moat to cross

none

Market

Crowded market

Share on X
Moat depth
MoatlessShallowReal

Revenue not verified. Founders can list on TrustMRR to show it here.

01/The verdict

Open-source (AGPL) coding agent you deploy to your own Cloudflare account. Every task waits for your approval, runs in a sandbox and can open a PR. Pre-revenue, with a waitlist and no paying customers found.

Shiba wires together pieces anyone can use: Cloudflare Workers and the Sandbox SDK, existing agent harnesses, and the GitHub PR API. Its main repo has 6 stars, 0 forks and one active developer, whose GitHub profile has about 10 followers. A rival open-source project on the same stack, ColeMurray/background-agents, already has 3.4k stars and 495 forks, and big paid products (Codex, Copilot coding agent, Cursor, Devin) give teams the same result with no self-hosting.

02/Moats

No moats found. Nothing here would take a good clone longer than 2 weeks.

03/The gap

Easy to copy

  • The approve, sandbox, diff, PR flow is a thin layer over the Cloudflare Sandbox SDK and the GitHub API. Public tutorials already show Claude Code running in Cloudflare Sandbox.
  • The code is AGPL, so anyone can fork it today.
  • Pluggable sandboxes and custom agents for each org are config and adapter code, not hard tech.
  • Self-hosting means no hosted data and no lock-in. Users can leave whenever they like.

How you'd go after it

  • Fork or rebuild it, then win on distribution: launch posts, Hacker News, and a one-click Deploy to Cloudflare button. The incumbent has no audience to defend with.
  • Offer a hosted version with SOC 2 for teams that want approval gates but won't run Workers themselves.
  • Go after regulated or security-minded teams with audit logs, SSO and policy controls. These are things self-host hobby projects rarely ship.
  • Contribute to background-agents (3.4k stars) instead. That community already outnumbers Shiba's by orders of magnitude.

04/Build against it?

Stay away

Frontier labs and IDE vendors are flooding background coding agents, and a stronger open-source project already holds the Cloudflare self-host niche. Only worth it if you bring an existing developer audience or a compliance-heavy enterprise buyer.

Already selling this:ColeMurray/background-agents (Open-Inspect)OpenHandsOpenAI Codex cloudGitHub Copilot coding agentCursor background agentsDevin

05/Receipts

Checked 2h ago by Claude Opus 5.5 on high effort, with web search. Confidence: high.

Does yours?

Paste your website. You get your score in about a minute.