shouldiuse.io

Categories

VERDICT

Gliffy Review

Depends

Should I use Gliffy?

AI-Powered Technical Diagramming for Confluence - gliffy.com

· 1 day ago

Buy Gliffy if your team already works in Confluence or Jira and wants diagrams embedded there. Pick draw.io or Lucidchart if you diagram standalone or need a free option.

Confidence

Medium. Based on 45+ public sources; many snippets were truncated.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo evidence in reviewed sources.
  • Security posture

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo

Best for

  • Confluence-heavy documentation teams
  • Jira-based engineering teams
  • IT and ops drawing network or AWS diagrams
  • Atlassian admins with compliance needs

Not for

  • Teams outside Atlassian tools; standalone value drops
  • Free-tool seekers; does it for nothing
  • Design-heavy marketing visuals; Lucidchart fits better
  • Occasional diagram makers with one-off needs

Gotchas - check before you buy

high

Migration out hurts: one company needed a mass importer for 20,000 diagrams.

medium

Atlassian app licensing is per user; a 400-user licence is sold as a one-year subscription.

low

Best value sits inside Confluence or Jira; standalone buyers get a plainer tool.

low

Sources list Gliffy as paid; no permanent free tier appears in evidence.

Pros and cons

Pros

  • Rated 4.1/5 across 111 reviews.
  • Deep Confluence and Jira integration for technical diagrams.
  • Reviewers describe it as user-friendly.
  • Zero Egress app supports Atlassian Isolated Cloud for strict compliance.
  • Runs a Bugcrowd bug bounty and publishes a security page.

Cons

  • One global company migrated 20,000 diagrams from Gliffy to.
  • Gliffy Online took multiple CVEs in 2024, one rated CVSS 6.9.
  • A 2025 username enumeration flaw was disclosed.
  • Independent expert reviews are sparse; PCMag's is from 2017.

Sources & method

- 23 sources - Gliffy Online collected several 2024 CVEs plus a 2025 enumeration flaw; Perforce runs a Bugcrowd bug bounty and a security page.

official x7review x8security x5news x3
  • CVE-2024-10315, Insecure behavior in Gliffy Online, rated CVSS 6.9.
  • CVE-2024-7141, Advisory lists affected Gliffy Online versions; admins must check deployments.
  • CVE-2025-1714, Username enumeration flaw in Gliffy.
  • GHSA-hv9g-xmv8-5frh, GitHub advisory describes a flaw causing broken authentication.

Key stats

  • Value for money: 4/5

    Rating

  • Not disclosed

    Starting price

  • 23

    Sources

  • Analyzed

  • Value for money: 4/5. Redditors call it cheap.
  • Ease of use: 4/5. Reviewers call it user-friendly.
  • Feature depth: 3/5. Capable, but Visio and Lucidchart comparisons persist.
  • Support quality. No evidence in reviewed sources.
  • Security posture: 3/5. Recent CVEs, but active bug bounty.
  • 4.1/5 Spotsaas rating 111 reviews
  • Perforce Ownership Gliffy is a Perforce company
  • 466 Companies tracked TheirStack data on Gliffy usage

Pricing

Free tier: No

Security

Gliffy Online collected several 2024 CVEs plus a 2025 enumeration flaw; Perforce runs a Bugcrowd bug bounty and a security page.

  • CVE-2024-10315Insecure behavior in Gliffy Online, rated CVSS 6.9.⁹
  • CVE-2024-7141Advisory lists affected Gliffy Online versions; admins must check deployments.10
  • CVE-2025-1714Username enumeration flaw in Gliffy.11
  • GHSA-hv9g-xmv8-5frhGitHub advisory describes a flaw causing broken authentication.12

What users say

Reddit and review sources describe Gliffy as a user-friendly, cheap diagramming tool used for network and technical diagrams, averaging 4.1/5.

“Gliffy is great”
Reddit, r/sysadmin
“We use Gliffy”
Reddit, r/msp

Companies that use it

  • CarGurus18
  • Plastiq19
  • Sanford Health20

Companies that could

  • AdNovum Informatik AG22 Uses instead
Full analysis

Based on 45+ public sources; many snippets were truncated.

Good Confluence/Jira diagramming with recent CVEs; standalone buyers do better with draw.io or Lucidchart.

Methodology

Based on 45+ public sources; many snippets were truncated.

Read how a report is made.

Sources

  1. review
  2. review
  3. review
  4. review
  5. review
  6. review
  7. review
  8. review
  9. security
  10. CVE-2024-7141 advisoryvulnerability.circl.lu
    security
  11. security
  12. security
  13. Gliffy Bug Bountybugcrowd.com
    security
  14. official
  15. official
  16. official
  17. official
  18. official
  19. Plastiq case studycasestudies.com
    official
  20. official
  21. news
  22. news
  23. news

Add this review to your site

This check for Gliffy says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.