10/10
Ease of use (SoftwareFinder)
User-rated ease of use
Report
Should I Use Onyx AI?
The open-source AI enterprise search platform that helps teams find information across all company data.
Depends
DependsBuy it if your team is docs-heavy, has an engineer to self-host, patch CVEs, and wants Glean-class search free.
Powerful open-source Glean alternative — only if you can run and patch it. Four 2026 CVEs included.
Confidence: Medium
$0
Starting price
Open-source self-host
Yes
Free tier
Community edition
$10M
Funding
Raised March 2025
Value for money
5
Free self-host; $20/user managed cloud
Ease of use
4
10/10 user rating, but self-host needs ops
Feature depth
4
RAG chat, connectors, web access per reviews
Security posture
2
Four 2026 CVEs, one critical token exposure
Pros
Cons
Gotchas
- highOpen-source self-host: upgrades and security patching are on you — CVE history shows why that matters
- mediumCloud tier bills per user — company-wide rollout scales fast; self-host is free but you run it⁴
- lowCrowded name space: Onyx Security, Onyx database, Onyx AI Studio are unrelated companies
Best for
- Docs-heavy scaling teams
- Self-hosting engineers wanting private AI search
- Orgs wanting Glean-class search without Glean pricing
- Open-source shops
Not for
- Small teams — Notion or Slack search suffices
- Teams with no engineer to run and patch it
- Buyers wanting zero-admin turnkey SaaS
- Anyone connecting sensitive data before fixing the OAuth CVE
Companies that use it
- Ramp10
Pricing
Community
$0
- Open-source self-host
- You manage infra and security
Managed cloud
$20/user/mo
- Hosted cloud tier
- Per-user billing
Security
Multiple 2026 CVEs including critical OAuth token exposure; don't conflate with unrelated vendor Onyx Security.
- CVE-2026-71424 — Critical OAuth token exposureInformation disclosure via exposed OAuth tokens on the Onyx AI platform.11
- CVE-2026-63178 — Auth bypassAuthentication bypass vulnerability in the Onyx AI platform.12
- CVE-2026-42276 — Auth bypassAuthorization bypass vulnerability on the platform.13
- CVE-2026-42277 — Medium severityMedium-severity vulnerability in the Onyx AI platform.
What users say
Self-hosters on Reddit praise it as a private team ChatGPT with RAG and web access; SoftwareFinder users rate ease of use 10/10.
“a private, open source ChatGPT built for teams”
“Introducing Onyx - a fully open source chat UI with RAG, web”
Alternatives
Compare Onyx AI with each alternative.
Glean
Incumbent enterprise search; polished SaaS, no self-hosting required
Onyx AI vs GleanGoSearch
Managed enterprise search alternative named in competitor comparisons
Onyx AI vs GoSearchDust
Cloud-first AI assistant if self-hosting scares you
Onyx AI vs DustGuess: Notion/Slack search
Free built-in search — enough for small teams
Onyx AI vs Guess: Notion/Slack searchFull analysis
Based on ~30 public sources. Several unrelated 'Onyx' companies (Onyx Security, onyx.dev, Onyx AI Studio) were excluded from findings.
Sources
- Onyx AI official siteonyx.appofficial
- Onyx AI Pricingonyx.appofficial
review
review
- Introducing Onyx — r/selfhostedreddit.comreview
- Introducing Onyx — r/LocalLLaMAreddit.comreview
- Onyx AI: Pricing, Demo & Features — SoftwareFindersoftwarefinder.comreview
- Onyx AI Reviews — SoftwareFindersoftwarefinder.comreview
review
- Ramp case studyonyx.appofficial
- CVE-2026-71424 OAuth token exposurethehackerwire.comsecurity
- CVE-2026-63178 auth bypasssentinelone.comsecurity
- CVE-2026-42276 auth bypasssentinelone.comsecurity
- Onyx raises $10Mprospeo.ionews
review
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.