shouldiuse.io

Categories

VERDICT

cube.dev Review

Depends

Should I use cube.dev?

Cube is the agentic analytics platform, built on a semantic layer — AI-native business intelligence and embedded analytics with answers your team and your customers can trust. - cube.dev

· 1 month ago

Buy it if you have engineers to own a semantic layer for embedded analytics or shared metrics across BI and AI tools. Skip it if you want self-serve dashboards without a development team, or transparent published pricing.

Confidence

Medium. Based on ~20 public sources: Gartner, G2, AWS Marketplace reviews, Cube docs and security advisories, funding records, and case studies.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0, self-hosted

Cube Core (open source)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Cube CloudUsage-based subscription

Best for

  • Embedded customer-facing analytics
  • Data teams unifying metrics for BI and AI
  • Engineering-led orgs outgrowing raw SQL dashboards
  • Warehouse cost control via pre-aggregations

Not for

  • Non-technical teams wanting drag-and-drop dashboards
  • Small teams; a spreadsheet or Metabase is enough
  • Buyers needing transparent published pricing
  • Orgs with no engineers to own semantic models

Gotchas - check before you buy

medium

Cloud pricing is consumption-based and varies widely by deployment — get a quote first.

medium

Cube has reworked its cloud pricing model more than once; nail down terms at renewal.

medium

Self-hosted deployments must track advisories; WebSocket transport vulnerabilities disclosed in 2026.

medium

Guess: metrics defined in Cube's own modeling format create lock-in when migrating tools.

Pros and cons

Pros

  • Open-source core with ~20K GitHub stars and 5M+ users
  • Strong for developer-led semantic modeling
  • Responsive support; dev team easy to reach per reviewers
  • Case study: 100k-row customer reports cut to under 2 seconds
  • Runs as managed cloud or self-hosted

Cons

  • Tiny review base: 4.2/5 from just 7 Gartner reviews
  • No published prices; costs vary widely by deployment
  • Developer-led; non-technical teams can't self-serve modeling
  • Consumption-based cloud billing requires active cost monitoring
  • Past auth-bypass and WebSocket advisories add patching burden

Sources & method

- 15 sources - trust center with SOC 2, HIPAA, and GDPR reports; two past advisories (auth bypass, WebSocket transport) disclosed and patched.

official x5review x5security x3news x2
  • Express auth bypass in API gateway (GHSA-4J6X-W426-6RC6), Authentication bypass affecting @cubejs-backend/api-gateway; advisory covers overriding the default auth middleware.
  • WebSocket transport vulnerabilities, Two vulnerabilities in Cube's WebSocket transport, disclosed in a February 2026 vendor security advisory.

Key stats

  • Value for money: 3/5

    Rating

  • $0, self-hosted

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 3/5. Usage-based; costs vary widely by deployment
  • Ease of use: 2/5. Developer-led modeling; not self-serve
  • Feature depth: 5/5. Semantic layer, embedded analytics, pre-aggregations, AI APIs
  • Support quality: 4/5. Reviewers say dev team easy to reach
  • Security posture: 3/5. SOC 2/HIPAA documented, but past auth-bypass advisory
  • 4.2/5 Gartner rating 7 reviews
  • 27 G2 reviews across Cube products
  • $47M Total funding 3 rounds
  • Yes Free tier open-source, self-hosted Cube Core

Pricing

Cube Core (open source)

$0, self-hosted

  • Full semantic layer
  • Community support
  • LTS releases available

Cube Cloud

Usage-based subscription

  • Priced on resource consumption
  • Managed hosting
  • Quote-based; varies by deployment

Security

trust center with SOC 2, HIPAA, and GDPR reports; two past advisories (auth bypass, WebSocket transport) disclosed and patched.

  • Express auth bypass in API gateway (GHSA-4J6X-W426-6RC6)Authentication bypass affecting @cubejs-backend/api-gateway; advisory covers overriding the default auth middleware.10
  • WebSocket transport vulnerabilitiesTwo vulnerabilities in Cube's WebSocket transport, disclosed in a February 2026 vendor security advisory.11

What users say

Users praise the data modeling infrastructure and unusually accessible support team, though review volume is small.

“When there's any problem, cube dev team is super easy to access,”
AWS Marketplace review
“The data modeling infra is really well build on top o...”
Embeddable.com reviews

Companies that use it

  • Cuboh14
  • Relata
  • Cloud Academy
  • FeedMe
  • Drata
Full analysis

Based on ~20 public sources: Gartner, G2, AWS Marketplace reviews, Cube docs and security advisories, funding records, and case studies.

Powerful developer-led semantic layer for embedded analytics. Overkill without engineers; watch usage-based pricing.

Methodology

Based on ~20 public sources: Gartner, G2, AWS Marketplace reviews, Cube docs and security advisories, funding records, and case studies.

Read how a report is made.

Sources

  1. Cube.dev homepagecube.dev
    official
  2. Cube Platform Reviews — Gartner Peer Insightsgartner.com
    review
  3. Cube Products on G2g2.com
    review
  4. Cube Cloud Reviews — AWS Marketplaceaws.amazon.com
    review
  5. Embeddable Customer Reviewsembeddable.com
    review
  6. Semantic layer comparison hub — Strategy Softwaresoftware.strategy.com
    review
  7. Cube Dev pricing — Vendrvendr.com
    official
  8. Pricing in Cube Cloud — docsdocs.cube.dev
    official
  9. Cube Core on GitHubgithub.com
    official
  10. GHSA-4J6X-W426-6RC6 auth bypasskodemsecurity.com
    security
  11. Security advisory: WebSocket transportcube.dev
    security
  12. Security at Cubecube.dev
    security
  13. Cube Dev funding — Startup Introsstartupintros.com
    news
  14. Cuboh case studycube.dev
    official
  15. Cube.dev: From Semantic Layer Pioneer to Agentic Analyticsdatus.ai
    news

Add this review to your site

This check for cube.dev says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends cube.dev Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.