4.1/5
G2 rating
20 verified reviews
Report
Should I Use Dify?
Dify is the platform for production-ready agentic workflows. Build agents, knowledge pipelines, models, and tools on one canvas, deployable on Cloud, in your VPC, or self-hosted.
Depends
DependsBuy if you have technical staff to run and patch infrastructure and you need production agents or RAG with self-host/VPC control.
Strong open-source agent/RAG platform for technical teams; CVEs, patching, and stacked model costs rule it out for non-technical buyers.
Confidence: Medium
$59/mo
Starting price
Professional plan, excl. model API costs
Yes
Free tier
Per Dify billing docs
$41.5M raised
Funding
incl. $30M Series Pre-A at $180M valuation
Value for money
4
Users report 60–80% cheaper than custom builds
Ease of use
4
Praised drag-and-drop canvas for building agents
Feature depth
5
Agents, RAG, tools, multi-environment deploy in one canvas
Security posture
2
Multiple CVEs, one actively exploited, tenant-isolation flaws
Pros
Cons
Gotchas
Best for
- Technical teams building production agents and RAG
- Enterprises needing VPC or self-hosted AI
- Docs-heavy knowledge-base assistants
- Startups prototyping LLM apps cheaply
Not for
- Non-technical teams wanting plug-and-play automation
- Anyone unwilling to patch self-hosted installs quickly
- Simple single-chatbot needs — this is serious overkill
Companies that use it
- Kakaku10
Pricing
Professional
$59/mo
- Cloud workspace
- Model API usage billed separately
Higher cloud credit tiers
$59–$159/workspace
- Usage credits scale with volume
Enterprise
Not disclosed
- VPC or on-prem deploy
- Available via AWS Marketplace
Security
Checkered: multiple CVEs, one actively exploited, and cross-tenant research flaws; a Trust Center exists but self-hosters carry the patching burden.
- DifyTap vulnerabilitiesFour flaws could let attackers wiretap AI data across tenants on a platform powering 1M+ apps.⁵
- CVE-2025-56520 actively exploitedTracked as exploited in the wild and reported as unfixed.⁶
- CVE-2025-3466 RCERemote code execution vulnerability in Langgenius Dify.⁷
- SQL injection before 1.16.0-rc1Dify versions before 1.16.0-rc1 contain a SQL injection issue.
What users say
Users praise the value and drag-and-drop build experience, but the independent review base is small and reliability concerns surface in evaluations.
“Dify is 60-80% cheaper”
“Overall I think that Dify AI is a nice”
“Ingesting our 50,000-page knowledge”
Alternatives
Compare Dify with each alternative.
n8n
Broader workflow automation; frequent Dify comparison on Reddit
Langflow
Open-source visual LLM app builder, lighter lift
Dify vs LangflowStackAI
Low-code AI builder aimed at enterprise teams
Dify vs StackAIGumloop
Managed agentic workflows without self-hosting burden
Dify vs GumloopFull analysis
Based on 40+ public sources; many snippets were truncated, so quotes and figures reflect available text.
Sources
- Dify — official sitedify.aiofficial
review
- Dify Pricing 2026: Plans, Costs & Hidden Feescheckthat.aireview
review
security
- CVE-2025-56520 exploitation trackingcrowdsec.netsecurity
- CVE-2025-3466 RCE detailsentinelone.comsecurity
- Dify $30M Series Pre-A announcementbusinesswire.comnews
- langgenius/dify on GitHubgithub.comofficial
- Dify Customers — CB Insightscbinsights.comnews
review
- Dify reliability scoringrfp.wikireview
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.