shouldiuse.io

Categories

VERDICT

Cal Review

Depends

Should I use Cal?

Skip to content - cal.id

· 3 days ago

Small teams and developers get strong value from the free plan and open-source code. Buyers needing published security docs or enterprise support pick a different tool.

Confidence

Medium. Based on 13 usable public sources; many matches describe unrelated products named Cal.

Ratings

  • Value for money
  • Ease of useNo specific usability evidence in sources
  • Feature depthReview snippets omit feature details
  • Support qualityNo support evidence in sources
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Paid (entry)$10/month

Best for

  • Solo founders booking client calls
  • Small teams replacing paid booking tools
  • Developers wanting open-source, self-hosted scheduling

Not for

  • Compliance buyers needing a published security page
  • Guess: non-technical teams wanting hands-on vendor support
  • Anyone hunting the Cal AI calorie app; it is a different product

Gotchas - check before you buy

high

CVE-2026-9349, improper access control, is listed against.

medium

shows no security page; check this before sending calendar data.

medium

CVE-2025-31604, cross-site scripting, appears in a WordPress plugin vulnerability database.

low

Pricing details are truncated in sources; confirm per-seat fees before checkout.

Pros and cons

Pros

  • Free plan is available
  • Entry paid plan costs $10 monthly
  • G2 reviewers consistently praise the product
  • The open-source codebase publishes a security policy on GitHub

Cons

  • No security page is found at
  • Two CVEs are listed against
  • A Reddit self-hosting thread criticizes security messaging
  • Review results confuse this tool with the Cal AI calorie app

Sources & method

- 13 sources - Two CVEs are listed against Cal.com; cal.id/security shows no security page.

official x2review x5security x5news x1
  • CVE-2025-31604: Cal.com cross-site scripting, Listed March 31, 2025 in a WordPress plugin vulnerability database. Applicability to core is unclear.
  • CVE-2026-9349: Improper access control in Cal.com, Listed May 24, 2026 in a public vulnerability database.
  • GitHub audit issue reports 60 vulnerabilities, 8 critical, Filed May 16, 2026 against calcom/cal.diy, a repository in the GitHub organization.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 13

    Sources

  • Analyzed

  • Value for money: 4/5. Free tier; $10 monthly entry plan
  • Ease of use. No specific usability evidence in sources
  • Feature depth. Review snippets omit feature details
  • Support quality. No support evidence in sources
  • Security posture: 2/5. Two listed CVEs; no cal.id security page
  • $10/mo Starting price Entry paid plan
  • Yes Free tier Free plan offered
  • 2 Public CVEs listed XSS and access control

Pricing

Free

$0

  • Basic booking links
  • Calendar connections

Paid (entry)

$10/month

  • Guess: team scheduling and round-robin booking

Security

Two CVEs are listed against Cal.com; cal.id/security shows no security page.

  • CVE-2025-31604: Cal.com cross-site scriptingListed March 31, 2025 in a WordPress plugin vulnerability database. Applicability to core is unclear.10
  • CVE-2026-9349: Improper access control in Cal.comListed May 24, 2026 in a public vulnerability database.11
  • GitHub audit issue reports 60 vulnerabilities, 8 criticalFiled May 16, 2026 against calcom/cal.diy, a repository in the GitHub organization.12

What users say

G2 reviewers consistently praise Cal.com, but the reviewed snippets cut off before specifics.

Alternatives

Compare Cal with each alternative.

  • Calendly

    Guess: the mainstream booking tool most small teams know

  • Google Calendar appointment scheduling

    Guess: free booking links for teams already on Google Workspace

  • SavvyCal

    Guess: polished booking tool with calendar overlays and generous limits

    Cal vs SavvyCal

Companies that use it

  • Crove App
Full analysis

Based on 13 usable public sources; many matches describe unrelated products named Cal.

Free open-source scheduling, $10 monthly entry, but two listed CVEs and no cal.id security page demand buyer diligence.

Methodology

Based on 13 usable public sources; many matches describe unrelated products named Cal.

Read how a report is made.

Sources

  1. Cal.com | Scheduling Software for Online Bookingscal.com
    official
  2. Cal.com Pricingcal.com
    official
  3. Cal.com Reviews on G2g2.com
    review
  4. Cal ID Reviews on G2g2.com
    review
  5. Cal.com Pros and Cons on G2g2.com
    review
  6. Cal.com Reviews on Trustpilottrustpilot.com
    review
  7. Anyone use cal.com selfhosted (Reddit r/selfhosted)reddit.com
    review
  8. Cal.com Pricing: Plans, Hidden Costs (Knock)knock-ai.com
    news
  9. Security page scan for cal.idcal.id
    security
  10. CVE-2025-31604: Cal.com cross-site scriptingfused.com
    security
  11. CVE-2026-9349: Improper access control in Cal.comdbu.gs
    security
  12. GitHub audit issue in calcom/cal.diygithub.com
    security
  13. Cal.com SECURITY.md on GitHubgithub.com
    security

Add this review to your site

This check for Cal says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Cal Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.