shouldiuse.io

Categories

VERDICT

Redis Review

Depends

Should I use Redis?

Developers love Redis. Unlock the full potential of the Redis database with Redis Enterprise and start building blazing fast apps. - redis.io

· 1 month ago

Redis is the proven category leader for in-memory caching and real-time data — fast, widely deployed, and highly rated — but the 2024-2025 license saga, recurring critical CVEs, and costs that spike at scale make it workload- and risk-dependent. Buy it for speed-critical caching, session, and queue workloads; shortlist Valkey or Dragonfly if cost-at-scale or open-source provenance is a hard requirement.

Confidence

Medium. Based on 30+ public sources reviewed (peer reviews, CVE databases, vendor advisories, pricing pages, company news). Many source snippets were truncated, so exact pricing figures were unavailable; confidence is medium rather than high for that reason.

Ratings

  • Value for moneyNot disclosed
  • Ease of useNot disclosed
  • Feature depthNot disclosed
  • Support qualityNot disclosed
  • Security postureNot disclosed

Pricing

Not disclosed in reviewed sources

No concrete prices were disclosed in the reviewed evidence. Redis sells a managed cloud tier (advertising up to 99.99% uptime and Redis Flex at 10% RAM) plus the Redis Enterprise commercial offering, while third-party reviews flag cost-at-scale as the top complaint. Managed Redis pricing varies dramatically by provider (pay-as-you-go like Upstash vs per-GiB-hour like Google Memorystore at $0.064/GiB-hour for small tiers), so comparison shopping is essential.

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Redis Enterprise (official commercial offering)Not disclosed in reviewed sources; typically negotiated

Best for

  • Low-latency caching and session storage for high-traffic apps (users report 'absolutely awesome' caching performance on massive analytics workloads)
  • Teams wanting a fully managed, multi-cloud service (Redis Cloud integrates with Google Cloud and Azure)
  • Organizations that value a mature product with strong peer ratings
  • Performance-critical in-memory workloads where 'always-on' operation with minimal launch overhead matters

Not for

  • Cost-sensitive teams expecting flat costs as data grows — Redis Cloud users name cost 'the biggest downside as you scale,' and cheaper per-GiB managed options (Google Memorystore, Upstash) and Dragonfly (claims up to 80% savings, same API) exist
  • Organizations requiring unambiguous OSI open-source licensing — Redis dropped its open-source license in 2024, triggering the Valkey fork, and only re-opened in 2025; compliance teams should not assume stability
  • Anyone planning to use it as a primary durable relational database — practitioners warn it 'is wonderful' for certain use cases but is frequently misused, with published guides on the ways to shoot yourself in the foot with it
  • Teams without the ops discipline to harden and patch — defaults assume trusted networks, and critical CVEs like RediShell required prompt upgrades across 13 years of affected releases

Gotchas - check before you buy

high

Pricing trap: costs balloon as you scale — G2 users explicitly call cost 'the biggest downside of Redis Cloud as you scale'; benchmark against per-GiB providers and Dragonfly's claimed 80% savings before committing

high

License whiplash: away from open source in March 2024, back again by May 2025 — verify and contractually pin the exact current license (and its AGPL obligations) in compliance review before embedding

high

Patch-cadence burden: a 13-years-of-releases RCE plus a batch of 5 CVEs disclosed via oss-sec in 2026 means you must budget for rapid, recurring upgrades if self-managing

medium

Lock-in: proprietary managed features advertised on the pricing page are Redis-Cloud-specific — plan an exit path if you ever migrate to Valkey or Dragonfly

medium

Lower managed tier includes only basic support (up to 99.99% uptime) — confirm the support SLA you actually get before signing

medium

Default configuration assumes a trusted network — expect real security work (strong passwords, disabling the default user, TLS, firewalling) in production, which marketing pages don't mention

Pros and cons

Pros

  • In-memory data store known for very high performance
  • Rated 4.5/5 across roughly 170-180 G2 reviews, praised for speed and reliability
  • Redis Cloud scores 4.7/5 from 212 ratings on Gartner Peer Insights
  • Users describe an always-on database with very little overhead when launched
  • Developers report excellent production caching performance ('It's absolutely awesome. Amazing for caching')
  • Redis Cloud is fully managed and integrated with Google Cloud and Azure

Cons

  • Cost at scale is the single biggest complaint from Redis Cloud users on G2
  • Critical RCE 'RediShell' (CVE-2025-49844) affected every Redis version released in the previous 13 years, putting ~60,000 servers at risk (no evidence of in-the-wild exploitation at disclosure)
  • The 2024 move away from open-source licensing split the community and spawned the Valkey fork, creating ecosystem uncertainty
  • Redis laid off around 200 people, a signal of company turbulence buyers should weigh
  • Redis is designed for use in trusted environments by default; production deployments require manual hardening (ACLs, TLS, firewalls)
  • Single-threaded command processing limits per-node scaling compared with multi-threaded alternatives

Sources & method

- 23 sources - Active and serious CVE history in 2025-2026, headlined by the critical RediShell RCE (CVE-2025-49844), a use-after-free bug affecting all versions released over 13 years (~60,000 exposed servers; no confirmed in-the-wild exploitation at disclosure). Redis publishes advisories and runs a trust center, but defaults assume trusted networks, so hardening and prompt patching are on you.

official x3review x6security x5news x9
  • CVE-2025-49844 'RediShell' — Critical RCE (use-after-free), Memory-corruption use-after-free enabling remote code execution; affected every Redis version released in the prior 13 years and put ~60,000 servers at risk; patched via coordinated advisory with no evidence of exploitation in the wild at disclosure.
  • CVE-2025-46819 — High-severity denial of service, High-severity DoS vulnerability tracked in SentinelOne's vulnerability database.
  • CVE-2025-21605 — Official security advisory, Redis published an official advisory with impacted and fixed release listings.
  • CVE-2026-62356 — Rated High, Listed on the official Redis Trust Center as a High-severity vulnerability.
  • Batch of 5 CVEs disclosed via oss-sec (2026), A coordinated disclosure covering five Redis CVEs was posted to the oss-sec mailing list in Q2 2026.

Key stats

  • Not rated

    Rating

  • Not disclosed

    Starting price

  • 23

    Sources

  • Analyzed

Pricing

Redis Cloud (managed; up to 99.99% uptime, Redis Flex option)

Not disclosed

Redis Enterprise (official commercial offering)

Not disclosed

No concrete prices were disclosed in the reviewed evidence. Redis sells a managed cloud tier (advertising up to 99.99% uptime and Redis Flex at 10% RAM) plus the Redis Enterprise commercial offering, while third-party reviews flag cost-at-scale as the top complaint. Managed Redis pricing varies dramatically by provider (pay-as-you-go like Upstash vs per-GiB-hour like Google Memorystore at $0.064/GiB-hour for small tiers), so comparison shopping is essential.

Security

Active and serious CVE history in 2025-2026, headlined by the critical RediShell RCE (CVE-2025-49844), a use-after-free bug affecting all versions released over 13 years (~60,000 exposed servers; no confirmed in-the-wild exploitation at disclosure).

  • CVE-2025-49844 'RediShell' — Critical RCE (use-after-free)Memory-corruption use-after-free enabling remote code execution; affected every Redis version released in the prior 13 years and put ~60,000 servers at risk; patched via coordinated advisory with no evidence of exploitation in the wild at disclosure.10
  • CVE-2025-46819 — High-severity denial of serviceHigh-severity DoS vulnerability tracked in SentinelOne's vulnerability database.12

Redis publishes advisories and runs a trust center, but defaults assume trusted networks, so hardening and prompt patching are on you.

  • CVE-2025-21605 — Official security advisoryRedis published an official advisory with impacted and fixed release listings.
  • CVE-2026-62356 — Rated HighListed on the official Redis Trust Center as a High-severity vulnerability.13
  • Batch of 5 CVEs disclosed via oss-sec (2026)A coordinated disclosure covering five Redis CVEs was posted to the oss-sec mailing list in Q2 2026.14

What users say

Ratings are strong: roughly 4.5/5 across ~170-180 G2 reviews and 4.7/5 (212 ratings) on Gartner Peer Insights.

Users consistently praise speed, reliability, low overhead, and caching performance in production; the loudest recurring complaint is cost as usage scales.

Alternatives

Compare Redis with each alternative.

  • Valkey

    Open-source fork of Redis created after the 2024 license change — the safe pick for teams that need guaranteed open-source provenance.

  • Dragonfly

    Redis-compatible API claiming up to 80% cost savings through more efficient, multi-threaded resource use.

    Redis vs Dragonfly

  • Google Cloud Memorystore

    Managed Redis on GCP with transparent per-GiB-hour pricing (~$0.064/GiB-hr for small tiers).

  • Upstash Redis

    Serverless pay-as-you-go Redis for spiky or unpredictable workloads.

Full analysis

Based on 30+ public sources reviewed (peer reviews, CVE databases, vendor advisories, pricing pages, company news). Many source snippets were truncated, so exact pricing figures were unavailable; confidence is medium rather than high for that reason.

No concrete prices were disclosed in the reviewed evidence. Redis sells a managed cloud tier (advertising up to 99.99% uptime and Redis Flex at 10% RAM) plus the Redis Enterprise commercial offering, while third-party reviews flag cost-at-scale as the top complaint. Managed Redis pricing varies dramatically by provider (pay-as-you-go like Upstash vs per-GiB-hour like Google Memorystore at $0.064/GiB-hour for small tiers), so comparison shopping is essential.

More pros

  • Redis Cloud is fully managed and integrated with Google Cloud and Azure

More cons

  • Single-threaded command processing limits per-node scaling compared with multi-threaded alternatives

More gotchas

  • Lower managed tier includes only basic support (up to 99.99% uptime) — confirm the support SLA you actually get before signing
  • Default configuration assumes a trusted network — expect real security work (strong passwords, disabling the default user, TLS, firewalling) in production, which marketing pages don't mention

Methodology

Based on 30+ public sources reviewed (peer reviews, CVE databases, vendor advisories, pricing pages, company news). Many source snippets were truncated, so exact pricing figures were unavailable; confidence is medium rather than high for that reason.

Read how a report is made.

Sources

  1. Redis Cloud Reviews & Ratings — Gartner Peer Insights (4.7/5, 212 ratings)gartner.com
    review
  2. Redis Cloud Reviews — G2g2.com
    review
  3. Redis Software Reviews — G2g2.com
    review
  4. Redis Reviews 2026: What Enterprise Users Really Saycheckthat.ai
    review
  5. What do you think about REALLY using Redis? — r/railsreddit.com
    review
  6. Redis on FreeBSD: In-Memory Data Store Reviewfreebsdsoftware.org
    review
  7. Redis Pricing — official pageredis.io
    official
  8. Redis Wins At the Polls — official blogredis.io
    official
  9. Wiz Finds Critical Redis RCE Vulnerability: CVE-2025-49844wiz.io
    security
  10. SecurityWeek: Critical Vulnerability Puts 60,000 Redis Servers at Risksecurityweek.com
    news
  11. Risky Bulletin: Redis vulnerability impacts 13 years of versionsnews.risky.biz
    news
  12. CVE-2025-46819 — SentinelOne vulnerability databasesentinelone.com
    security
  13. Redis Trust Centertrust.redis.io
    security
  14. oss-sec: 5 CVEs in Redisseclists.org
    security
  15. Redis is switching away from open-source licensing — r/redisreddit.com
    news
  16. Redis is Open Source again — r/linuxreddit.com
    news
  17. Redis to layoff 200 people — r/Layoffsreddit.com
    news
  18. Exploring Redis Alternatives — OpenLogicopenlogic.com
    news
  19. Dragonfly — Redis Alternative (same API, up to 80% savings claim)dragonflydb.io
    news
  20. Redis Pricing Compared: Every Major Provider in 2026 — Upstashupstash.com
    news
  21. How to Secure Redis in Production — OneUptimeoneuptime.com
    security
  22. Redis security — official docsredis.io
    official
  23. Redis (company) — Wikipedia / funding contexten.wikipedia.org
    news

Add this review to your site

This check for Redis says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Redis Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.