shouldiuse.io

Report

Should I Use Redis?

redis.io·Analyzed 1 day ago·Based on 23 sources

Developers love Redis. Unlock the full potential of the Redis database with Redis Enterprise and start building blazing fast apps.

Depends

Depends

Redis is the proven category leader for in-memory caching and real-time data — fast, widely deployed, and highly rated — but the 2024-2025 license saga, recurring critical CVEs, and costs that spike at scale make it workload- and risk-dependent.

Confidence: Medium

Pros

  • In-memory data store known for very high performance⁶
  • Rated 4.5/5 across roughly 170-180 G2 reviews, praised for speed and reliability⁴
  • Redis Cloud scores 4.7/5 from 212 ratings on Gartner Peer Insights¹
  • Users describe an always-on database with very little overhead when launched³
  • Developers report excellent production caching performance ('It's absolutely awesome. Amazing for caching')⁵

Cons

  • Cost at scale is the single biggest complaint from Redis Cloud users on G2²
  • Critical RCE 'RediShell' (CVE-2025-49844) affected every Redis version released in the previous 13 years, putting ~60,000 servers at risk (no evidence of in-the-wild exploitation at disclosure)10
  • The 2024 move away from open-source licensing split the community and spawned the Valkey fork, creating ecosystem uncertainty15
  • Redis laid off around 200 people, a signal of company turbulence buyers should weigh17
  • Redis is designed for use in trusted environments by default; production deployments require manual hardening (ACLs, TLS, firewalls)21

Gotchas

  • highPricing trap: costs balloon as you scale — G2 users explicitly call cost 'the biggest downside of Redis Cloud as you scale'; benchmark against per-GiB providers and Dragonfly's claimed 80% savings before committing²
  • highLicense whiplash: away from open source in March 2024, back again by May 2025 — verify and contractually pin the exact current license (and its AGPL obligations) in compliance review before embedding16
  • highPatch-cadence burden: a 13-years-of-releases RCE plus a batch of 5 CVEs disclosed via oss-sec in 2026 means you must budget for rapid, recurring upgrades if self-managing11
  • mediumLock-in: proprietary managed features advertised on the pricing page are Redis-Cloud-specific — plan an exit path if you ever migrate to Valkey or Dragonfly⁷

Best for

  • Low-latency caching and session storage for high-traffic apps (users report 'absolutely awesome' caching performance on massive analytics workloads)
  • Teams wanting a fully managed, multi-cloud service (Redis Cloud integrates with Google Cloud and Azure)
  • Organizations that value a mature product with strong peer ratings
  • Performance-critical in-memory workloads where 'always-on' operation with minimal launch overhead matters

Not for

  • Cost-sensitive teams expecting flat costs as data grows — Redis Cloud users name cost 'the biggest downside as you scale,' and cheaper per-GiB managed options (Google Memorystore, Upstash) and Dragonfly (claims up to 80% savings, same API) exist
  • Organizations requiring unambiguous OSI open-source licensing — Redis dropped its open-source license in 2024, triggering the Valkey fork, and only re-opened in 2025; compliance teams should not assume stability
  • Anyone planning to use it as a primary durable relational database — practitioners warn it 'is wonderful' for certain use cases but is frequently misused, with published guides on the ways to shoot yourself in the foot with it
  • Teams without the ops discipline to harden and patch — defaults assume trusted networks, and critical CVEs like RediShell required prompt upgrades across 13 years of affected releases

Pricing

Redis Cloud (managed; up to 99.99% uptime, Redis Flex option)

Not disclosed

Redis Enterprise (official commercial offering)

Not disclosed

Security

Active and serious CVE history in 2025-2026, headlined by the critical RediShell RCE (CVE-2025-49844), a use-after-free bug affecting all versions released over 13 years (~60,000 exposed servers; no confirmed in-the-wild exploitation at disclosure).

  • CVE-2025-49844 'RediShell' — Critical RCE (use-after-free)Memory-corruption use-after-free enabling remote code execution; affected every Redis version released in the prior 13 years and put ~60,000 servers at risk; patched via coordinated advisory with no evidence of exploitation in the wild at disclosure.10
  • CVE-2025-46819 — High-severity denial of serviceHigh-severity DoS vulnerability tracked in SentinelOne's vulnerability database.12
  • CVE-2025-21605 — Official security advisoryRedis published an official advisory with impacted and fixed release listings.
  • CVE-2026-62356 — Rated HighListed on the official Redis Trust Center as a High-severity vulnerability.13
  • Batch of 5 CVEs disclosed via oss-sec (2026)A coordinated disclosure covering five Redis CVEs was posted to the oss-sec mailing list in Q2 2026.14

What users say

Ratings are strong: roughly 4.5/5 across ~170-180 G2 reviews and 4.7/5 (212 ratings) on Gartner Peer Insights.

Alternatives

Compare Redis with each alternative.

Valkey

Open-source fork of Redis created after the 2024 license change — the safe pick for teams that need guaranteed open-source provenance.

Upstash Redis

Serverless pay-as-you-go Redis for spiky or unpredictable workloads.

Full analysis

Based on 30+ public sources reviewed (peer reviews, CVE databases, vendor advisories, pricing pages, company news). Many source snippets were truncated, so exact pricing figures were unavailable; confidence is medium rather than high for that reason.

No concrete prices were disclosed in the reviewed evidence. Redis sells a managed cloud tier (advertising up to 99.99% uptime and Redis Flex at 10% RAM) plus the Redis Enterprise commercial offering, while third-party reviews flag cost-at-scale as the top complaint. Managed Redis pricing varies dramatically by provider (pay-as-you-go like Upstash vs per-GiB-hour like Google Memorystore at $0.064/GiB-hour for small tiers), so comparison shopping is essential.

More pros

  • Redis Cloud is fully managed and integrated with Google Cloud and Azure

More cons

  • Single-threaded command processing limits per-node scaling compared with multi-threaded alternatives

More gotchas

  • Lower managed tier includes only basic support (up to 99.99% uptime) — confirm the support SLA you actually get before signing
  • Default configuration assumes a trusted network — expect real security work (strong passwords, disabling the default user, TLS, firewalling) in production, which marketing pages don't mention

Sources

  1. Redis Cloud Reviews & Ratings — Gartner Peer Insights (4.7/5, 212 ratings)gartner.com
    review
  2. Redis Cloud Reviews — G2g2.com
    review
  3. Redis Software Reviews — G2g2.com
    review
  4. Redis Reviews 2026: What Enterprise Users Really Saycheckthat.ai
    review
  5. What do you think about REALLY using Redis? — r/railsreddit.com
    review
  6. Redis on FreeBSD: In-Memory Data Store Reviewfreebsdsoftware.org
    review
  7. Redis Pricing — official pageredis.io
    official
  8. Redis Wins At the Polls — official blogredis.io
    official
  9. Wiz Finds Critical Redis RCE Vulnerability: CVE-2025-49844wiz.io
    security
  10. SecurityWeek: Critical Vulnerability Puts 60,000 Redis Servers at Risksecurityweek.com
    news
  11. Risky Bulletin: Redis vulnerability impacts 13 years of versionsnews.risky.biz
    news
  12. CVE-2025-46819 — SentinelOne vulnerability databasesentinelone.com
    security
  13. Redis Trust Centertrust.redis.io
    security
  14. oss-sec: 5 CVEs in Redisseclists.org
    security
  15. Redis is switching away from open-source licensing — r/redisreddit.com
    news
  16. Redis is Open Source again — r/linuxreddit.com
    news
  17. Redis to layoff 200 people — r/Layoffsreddit.com
    news
  18. Exploring Redis Alternatives — OpenLogicopenlogic.com
    news
  19. Dragonfly — Redis Alternative (same API, up to 80% savings claim)dragonflydb.io
    news
  20. Redis Pricing Compared: Every Major Provider in 2026 — Upstashupstash.com
    news
  21. How to Secure Redis in Production — OneUptimeoneuptime.com
    security
  22. Redis security — official docsredis.io
    official
  23. Redis (company) — Wikipedia / funding contexten.wikipedia.org
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Ask a follow-up

Ask if a use case fits. Answers stay inside this report and its sources.