shouldiuse.io

VERDICT

Should I use dbt Labs?

dbt Labs empowers data teams to build reliable, governed data pipelines—accelerating analytics and AI initiatives with speed and confidence. - getdbt.com

Depends. Buy if you have dedicated analytics engineers and a real data warehouse. Skip if you're a small team with no SQL resource — this is a platform, not a tool, and the free-but-code-first route demands engineering time.

Confidence

Medium. Based on 14 public sources: vendor pages, Reddit practitioner threads, review aggregators, security advisories, and news coverage.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo direct evidence in sources reviewed
  • Security posture

Pricing

$0

dbt Core

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
dbt CloudFrom ~$100/mo
EnterpriseCustom

Best for

  • Analytics engineering teams
  • Mid-size to large companies with data warehouses
  • Organizations building governed pipelines for AI
  • SQL-fluent data teams wanting version-controlled transforms

Not for

  • Small teams that just need dashboards off a spreadsheet or BI tool
  • Companies with no dedicated data engineer or analytics engineer
  • Non-technical teams wanting drag-and-drop ETL
  • Anyone unwilling to maintain code, packages, and CI pipelines

Gotchas - check before you buy

high

dbt Cloud starts around $100/mo per seat; costs climb fast on consumption billing

high

Real users documented hidden fees and billing surprises post-2023 restructure

medium

Recent critical CVE (GitHub Actions RCE) and dbt-mcp data-exposure CVE — patch promptly

medium

Fivetran merger (announced Oct 2025) may change roadmap, bundling, and contract terms

Pros and cons

Pros

  • dbt Core is completely free and open-source
  • 4.7/5 on G2 across 209 verified reviews
  • ISO 27001, 27017, 27018, and 42001 certified
  • Used by more than 60,000 data teams globally
  • Deep feature set: governance, semantic layer, AI enablement

Cons

  • Hidden fees documented after 2023 pricing restructure
  • Announced price increases on dbt Cloud
  • Consumption-based pricing makes monthly bills hard to predict
  • Steep, code-first learning curve; some teams struggle badly
  • Critical RCE vulnerability in its GitHub Actions integration

Sources & method

Analyzed 9/20/2026 - 14 sources - ISO 27001 plus 27017/27018/42001 certified with a bug bounty; recent critical CVEs require prompt patching.

official x2review x7security x3news x2
  • CVE-2026-39382: dbt GitHub Actions RCE, Critical remote code execution vulnerability in dbt's GitHub Actions integration.
  • CVE-2026-55837: dbt-mcp sensitive data exposure, CWE-200 exposure of sensitive information in dbt's MCP tooling.
  • CVE-2026-44968, CVE listed against dbt-labs in NVD; review details before purchase.

Key stats

  • Value for money: 2/5

    Rating

  • $0

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 2/5. Documented price hikes, hidden fees, unpredictable consumption billing
  • Ease of use: 3/5. Code-first; some practitioners call it a mess
  • Feature depth: 5/5. Governance, semantic layer, AI tooling; 60,000+ teams
  • Support quality. No direct evidence in sources reviewed
  • Security posture: 4/5. ISO 27001/27017/27018/42001; recent CVEs need patching
  • 4.7/5 G2 rating 209 verified reviews
  • ~$100/mo Starting price dbt Cloud; dbt Core is free
  • Yes Free tier dbt Core, open-source
  • $4.2B Valuation $222M Series D; merging with Fivetran

Pricing

dbt Core

$0

  • Open-source
  • Self-managed CLI
  • Community support

dbt Cloud

From ~$100/mo

  • Hosted orchestration
  • Seat-based billing
  • Estimated entry price

Enterprise

Not disclosed

  • Consumption-based pricing
  • Governance and security features
  • Negotiated contracts

Security

ISO 27001 plus 27017/27018/42001 certified with a bug bounty; recent critical CVEs require prompt patching.

  • CVE-2026-39382: dbt GitHub Actions RCECritical remote code execution vulnerability in dbt's GitHub Actions integration.⁹
  • CVE-2026-55837: dbt-mcp sensitive data exposureCWE-200 exposure of sensitive information in dbt's MCP tooling.10
  • CVE-2026-44968CVE listed against dbt-labs in NVD; review details before purchase.

What users say

Practitioners broadly rate dbt highly (4.7/5 G2) but complain about Cloud pricing and a punishing learning curve.

“I love using dbt, I'm not going to stop using it”
Reddit, r/dataengineering
“Is dbt actually a hot mess or is it just me?”
Reddit, r/dataengineering
“dbt Core is completely free and open-source”
Integrate.io review

Companies that use it

  • JetBlue
  • 14
  • Mastery
Full analysis

Based on 14 public sources: vendor pages, Reddit practitioner threads, review aggregators, security advisories, and news coverage.

Category-standard SQL transformation. Powerful for data teams; overkill without analytics engineers.

Methodology

Based on 14 public sources: vendor pages, Reddit practitioner threads, review aggregators, security advisories, and news coverage.

Sources

  1. dbt Review 2026: Pros and Cons for Data Teamsintegrate.io
    review
  2. Best dbt Tools 2026: Complete Comparison & Guidecheckthat.ai
    review
  3. dbt Cloud Complaints & Hidden Fees: 3 Real Issues Documentedsaasflags.com
    review
  4. Is Your dbt Cloud Too Expensive?hightouch.com
    review
  5. Is dbt actually a hot mess or is it just me?reddit.com
    review
  6. dbt - what are the alternatives?reddit.com
    review
  7. How dbt failsbenn.substack.com
    review
  8. dbt Security & Compliancegetdbt.com
    security
  9. CVE-2026-39382: dbt GitHub Actions RCE Vulnerabilitysentinelone.com
    security
  10. CVE-2026-55837: dbt-mcp data exposurerapid7.com
    security
  11. Philadelphia unicorn dbt Labs to merge with Fivetrantechnical.ly
    news
  12. dbt Labs raises $222M in Series D funding at $4.2Bgetdbt.com
    news
  13. dbt Labs on LinkedIn (60,000+ data teams)linkedin.com
    official
  14. dbt case studiesgetdbt.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.