Data orchestrator platform to build, schedule, and monitor reliable data pipelines. - dagster.io
· 1 month ago
Buy it if you have a real data engineering team building Python pipelines that need lineage, observability, and scheduling. Skip it if you just run a few scripts — cron, Airflow, or Prefect is simpler, and Dagster is mid-merge with Prefect anyway.
Confidence
Medium. Based on ~15 public sources; pricing and support evidence is thin.
Ratings
Value for money
Ease of use
Feature depth
Support qualityNo support evidence in sources
Security posture
Pricing
$0
Open Source
ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Best for
→Python-savvy data engineering teams
→dbt-centric analytics stacks
→Teams needing asset lineage and observability
→AI/data pipeline platforms
Not for
×Small teams that just need scheduled scripts — use cron
×Non-Python shops without engineers to own it
×Buyers wanting zero-infra managed ingestion — use Fivetran
×Risk-averse buyers: vendor is merging into Prefect
Gotchas - check before you buy
high
Dagster is joining Prefect; expect product, roadmap, and possibly pricing changes during integration
high
Disclosed LFI CVE targeted the gRPC server; restrict access and patch promptly
medium
Self-hosting the free core means you own upgrades, patching, and security for the gRPC layer
medium
Published pricing not found in sources; likely sales-led — negotiate and get multi-year protection
Pros and cons
Pros
+Asset-centric orchestration model praised by practitioners
+Open source, cloud-native, full development lifecycle
+Integrated lineage and observability out of the box
+Enterprise features: SAML SSO, RBAC, audit logs
+Widely recommended in the dbt community
Cons
−CVE-2025-51481: arbitrary file read via gRPC notebook endpoint
−Dagster is joining Prefect — roadmap uncertainty
−Built for engineers; not analyst-friendly
−Thin public review volume makes satisfaction hard to verify
Sources & method
- 8 sources - Published security page with SSO/RBAC/audit logging; one disclosed 2025 local-file-inclusion CVE in the gRPC server.
official x3review x2security x2news x1
CVE-2025-51481 — LFI in gRPC ExternalNotebookData endpoint, Attackers with access to the gRPC server could read arbitrary files via path traversal in the notebook_path field.
Key stats
Value for money: 4/5
Rating
$0
Starting price
8
Sources
Analyzed
Value for money: 4/5. Open-source core; free if self-hosted
Ease of use: 4/5. Local developer experience called best in category
Feature depth: 4/5. Lineage, observability, catalog, quality built in
Support quality. No support evidence in sources
Security posture: 3/5. SSO/RBAC/audit logs, but one disclosed LFI CVE
4.5/5 G2 rating low public review volume
~$47M Funding private (Elementl, Inc.)
Yes Free tier open-source core, self-hosted
Pricing
Open Source
$0
Self-hosted orchestration
You manage infrastructure
Security
Published security page with SSO/RBAC/audit logging; one disclosed 2025 local-file-inclusion CVE in the gRPC server.
CVE-2025-51481 — LFI in gRPC ExternalNotebookData endpointAttackers with access to the gRPC server could read arbitrary files via path traversal in the notebook_path field.⁵
What users say
Practitioners praise the asset-centric model and local developer experience, with little complaint volume in sources.
“Dagster's local developer experience is one of the best in the category”
“In a couple days I was able to make a data processing pipeline that read in an Excel file and use the data to create CAD files and update their properties.”
Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.
Rate this review
Anonymous. You can change your vote.
Loading votes…
Comments
One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.
No comments yet.
SHOULDIUSE.IO — PRODUCT FIT REPORT
Dagster
dagster.io · Analyzed 1 month ago · 9/18/2026
Buy it if you have a real data engineering team building Python pipelines that need lineage, observability, and scheduling.
Who it's for
Python-savvy data engineering teams
dbt-centric analytics stacks
Teams needing asset lineage and observability
AI/data pipeline platforms
Who it's not for
Small teams that just need scheduled scripts — use cron
Non-Python shops without engineers to own it
Buyers wanting zero-infra managed ingestion — use Fivetran
Risk-averse buyers: vendor is merging into Prefect
Companies that use it
Flo Energy1
Gotchas
Dagster is joining Prefect; expect product, roadmap, and possibly pricing changes during integration3
Disclosed LFI CVE targeted the gRPC server; restrict access and patch promptly6
Self-hosting the free core means you own upgrades, patching, and security for the gRPC layer2
Published pricing not found in sources; likely sales-led — negotiate and get multi-year protection4
Pricing notes
Open Source: $0: Self-hosted orchestration; You manage infrastructure
Key capabilities
4.5/5: G2 rating (low public review volume)
~$47M: Funding (private (Elementl, Inc.))
Yes: Free tier (open-source core, self-hosted)
Value for money: 4/5. Open-source core; free if self-hosted
Ease of use: 4/5. Local developer experience called best in category
Feature depth: 4/5. Lineage, observability, catalog, quality built in
Security posture: 3/5. SSO/RBAC/audit logs, but one disclosed LFI CVE
Security notes
Published security page with SSO/RBAC/audit logging; one disclosed 2025 local-file-inclusion CVE in the gRPC server.
CVE-2025-51481 — LFI in gRPC ExternalNotebookData endpoint. Attackers with access to the gRPC server could read arbitrary files via path traversal in the notebook_path field.5
Comments
One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.
No comments yet.