shouldiuse.io

Categories

VERDICT

Flyte Review

Depends

Should I use Flyte?

[Migrating from Flyte 1? Check out our migration resources ](/migrate) - flyte.org

· 1 week ago

Flyte fits teams running serious production data/ML pipelines with engineers who can operate Kubernetes. Skip it if you just need scheduled scripts — a cron job or managed scheduler is simpler and cheaper.

Confidence

Medium. Based on ~20 usable public sources. Many 'Flyte' search hits were unrelated (a band, a bike brand, a medical device), so independent user-review evidence is thin.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Union Cloud (managed)Not published

Best for

  • Data/ML teams running production pipelines
  • Python-first platform engineering teams
  • Teams outgrowing cron jobs or Airflow pain

Not for

  • Small teams with simple scheduled scripts
  • Anyone without Kubernetes or platform engineering skills
  • Non-technical buyers wanting a turnkey SaaS
  • One-off data jobs with no pipeline growth

Gotchas - check before you buy

high

Default OAuth authorization server secret must be rotated when enabling auth

medium

FlyteAdmin history includes SQL injection and hard-coded credentials — keep installs patched

medium

Flyte 1 to Flyte 2 is a migration, not an upgrade — budget rework time

medium

Union Cloud managed pricing is unpublished — confirm costs before committing

Pros and cons

Pros

  • Open-source and battle-tested on Lyft's large data pipelines
  • Flyte 2.0 adds dynamic, fault-tolerant workflow orchestration
  • Free to self-host; commercial offering exists via
  • Official migration resources ease the Flyte 1 to 2 jump

Cons

  • No public pricing; managed version means contacting
  • Guess: self-hosting requires Kubernetes and real ops investment
  • Self-hosted Admin component carried multiple 2022-2023 CVEs
  • Few independent user reviews found; evaluation leans on vendor material

Sources & method

- 12 sources - Open source with a patched 2022-2023 CVE history, all in the self-hosted Admin component; publishes a security page.

official x4review x3security x3news x2
  • CVE-2023-41891 — SQL injection in FlyteAdmin list filters, List endpoints on FlyteAdmin were vulnerable to SQL injection; fixed upstream.
  • CVE-2022-39273 — hard-coded credentials in FlyteAdmin, Default credentials existed when auth was enabled without changes; fix available.
  • CVE-2022-31145 — insufficient access token expiration check, FlyteAdmin failed to properly check access token expiration.
  • GHSA-67x4-qr35-qvrm — default OAuth server secret must be rotated, Users enabling auth must rotate the default OAuth authorization server secret.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Free open-source core; managed pricing opaque.
  • Ease of use: 3/5. Guess: self-hosting needs Kubernetes expertise.
  • Feature depth: 4/5. Dynamic, fault-tolerant pipelines for data and ML.
  • Support quality: 3/5. Active community forum; paid support unverified.
  • Security posture: 3/5. Patched 2022-23 CVEs; requires prompt upgrades.
  • 2020 Open-sourced Born at Lyft, now stewarded by Union.ai
  • Flyte 2.0 Latest version Released Sep 2025; migration resources for Flyte 1
  • Yes Free self-hosted core Open source; managed option via Union.ai

Pricing

Open source (self-hosted)

Free

  • Full workflow engine
  • You run and secure the infrastructure

Union Cloud (managed)

Not published

  • Hosted Flyte
  • Vendor-managed operations

Security

Open source with a patched 2022-2023 CVE history, all in the self-hosted Admin component; publishes a security page.

  • CVE-2023-41891 — SQL injection in FlyteAdmin list filtersList endpoints on FlyteAdmin were vulnerable to SQL injection; fixed upstream.⁵
  • CVE-2022-39273 — hard-coded credentials in FlyteAdminDefault credentials existed when auth was enabled without changes; fix available.⁶
  • CVE-2022-31145 — insufficient access token expiration checkFlyteAdmin failed to properly check access token expiration.
  • GHSA-67x4-qr35-qvrm — default OAuth server secret must be rotatedUsers enabling auth must rotate the default OAuth authorization server secret.⁷

What users say

Independent user reviews are scarce; community threads mostly show teams comparing Flyte against Airflow, Kubeflow, and Luigi.

“Hey folks currently investigating Flyte as an alternative to”
Flyte community forum
“Is Kubeflow the best or”
Reddit, r/mlops

Alternatives

Compare Flyte with each alternative.

  • Apache Airflow

    The incumbent scheduler; huge ecosystem, heavier ops burden.

  • Kubeflow

    Kubernetes-native ML workflows; steeper learning curve.

  • Luigi

    Simpler Python pipeline library; older and less dynamic.

    Flyte vs Luigi

  • ZenML

    ML-focused orchestration; lighter weight than Flyte.

Companies that use it

Full analysis

Based on ~20 usable public sources. Many 'Flyte' search hits were unrelated (a band, a bike brand, a medical device), so independent user-review evidence is thin.

Serious open-source data/ML pipeline orchestrator built at Lyft. Great for platform teams; overkill for simple scheduled jobs.

Methodology

Based on ~20 usable public sources. Many 'Flyte' search hits were unrelated (a band, a bike brand, a medical device), so independent user-review evidence is thin.

Read how a report is made.

Sources

  1. Orchestrating Data Pipelines at Lyft: comparing Flyte and Airfloweng.lyft.com
    official
  2. Union.ai Introduces Flyte 2.0finance.yahoo.com
    news
  3. Flyte 2.0 announcementunion.ai
    official
  4. Union.ai and Flyte Case Study (open source + commercial model)about.scarf.sh
    official
  5. CVE-2023-41891: FlyteAdmin SQL Injectionmiggo.io
    security
  6. CVE-2022-39273: Hard-coded Credentialsrapid7.com
    security
  7. GHSA-67x4-qr35-qvrm OAuth secret advisorygithub.com
    security
  8. Flyte Helm charts (self-hosted deployment)helm.flyte.org
    official
  9. Flyte Review – MLOps Platforms Analysis 2026productowl.io
    review
  10. Flyte vs. Airflow: key differencesgetorchestra.io
    review
  11. Flyte community forum threaddiscuss.flyte.org
    review
  12. Flyte launch on Hacker News (2020)news.ycombinator.com
    news

Add this review to your site

This check for Flyte says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Flyte Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.