shouldiuse.io

Categories

VERDICT

SigNoz Review

Depends

Should I use SigNoz?

SigNoz Cloud is a one-stop observability tool built on top of OpenTelemetry. Get APM, logs, traces, metrics, exceptions, AI observability & alerts in a single tool. - signoz.io

· 1 month ago

Buy if you're an engineering team comfortable with OpenTelemetry and some ops work who wants to cut Datadog-class bills. Skip it if you need polished UX, have nobody to run ClickHouse, or can't patch CVEs within days.

Confidence

Medium. Based on ~30 public sources: Reddit threads, CVE databases, official case studies, and pricing pages.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo user support evidence in sources
  • Security posture

Pricing

$0

Open Source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Cloud / TeamsFrom $4, usage-based
EnterpriseCustom

Best for

  • Engineering teams ditching Datadog bills
  • OpenTelemetry-standard shops
  • Self-hosters with ops capacity
  • Startups consolidating logs, traces, metrics

Not for

  • Teams with nobody to run ClickHouse and upgrades
  • Buyers expecting polished, stable UX today
  • Orgs that can't patch within days of a CVE
  • Non-engineering teams; this is dev-only tooling

Gotchas - check before you buy

high

SQL injection CVEs in alert endpoints, unfixed until 0.142.1

high

Auth-bypass/open-redirect CVE can steal session tokens

medium

Self-hosting means running ClickHouse and upgrades yourself

medium

Cloud pricing is usage-based; heavy ingest can inflate the bill

Pros and cons

Pros

  • All-in-one: APM, logs, traces, metrics, exceptions, alerts, AI observability
  • Open source, OpenTelemetry-native; self-host to avoid lock-in
  • Costs less than competing platforms at low volume
  • Real case studies: Shaped AI, Outplay, TableFlow consolidated tooling

Cons

  • Users report unstable log queries
  • Production users report UI problems
  • Rated 3.4/5, below rival Middleware at 3.8
  • Self-hosting requires running ClickHouse yourself

Sources & method

- 12 sources - SOC 2 Type II claimed, but multiple 2026 CVEs (SQL injection, auth bypass) mean you must patch fast.

official x3review x5security x3news x1
  • CVE-2026-57955: SQL injection in alert history endpoints (through 0.130.1), Rule ID parameter injectable in alert history endpoints.
  • CVE-2026-63094: auth bypass via open redirect, Open redirect enables session token theft.
  • CVE-2026-57956: vulnerability before 0.133.0, SigNoz before 0.133.0 contains a vulnerability; fix in 0.133.0.
  • CVE-2026-93292: SQL injection (0.88.0 before 0.142.1), Wide affected range; fixed in 0.142.1.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Costs less than rivals, free self-host option
  • Ease of use: 2/5. UI complaints; 'perfect tool on paper'
  • Feature depth: 4/5. APM, logs, traces, metrics, alerts in one
  • Support quality. No user support evidence in sources
  • Security posture: 2/5. SOC 2 claimed, but four recent CVEs
  • 3.4/5 Community rating RFP.wiki, vs Middleware's 3.8
  • From $4 Cloud starting price usage-based; open source self-host is free
  • Yes Free tier self-hosted OSS + 30-day cloud trial
  • 350+ Paying customers per co-founder on LinkedIn

Pricing

Open Source (self-hosted)

$0

  • Full platform, you run it
  • You own upgrades and ClickHouse ops

Cloud / Teams

From $4, usage-based

  • Managed hosting
  • 30-day free trial

Enterprise

Not disclosed

  • Built for scale
  • Enterprise-grade support

Security

SOC 2 Type II claimed, but multiple 2026 CVEs (SQL injection, auth bypass) mean you must patch fast.

  • CVE-2026-57955: SQL injection in alert history endpoints (through 0.130.1)Rule ID parameter injectable in alert history endpoints.⁸
  • CVE-2026-63094: auth bypass via open redirectOpen redirect enables session token theft.⁹
  • CVE-2026-57956: vulnerability before 0.133.0SigNoz before 0.133.0 contains a vulnerability; fix in 0.133.0.
  • CVE-2026-93292: SQL injection (0.88.0 before 0.142.1)Wide affected range; fixed in 0.142.1.10

What users say

Users like the price and OpenTelemetry approach but report unstable log queries and UI rough edges in production.

“Signoz log queries seem unstable.”
Reddit, r/kubernetes
“Looks like a perfect tool on paper,”
Reddit, r/kubernetes

Companies that use it

  • Shaped AI
  • Outplay
  • TableFlow
  • Kernel
  • Wombo
Full analysis

Based on ~30 public sources: Reddit threads, CVE databases, official case studies, and pricing pages.

Solid budget Datadog alternative for OTel-savvy teams; expect rough UI, unstable log queries, and recent CVEs.

Methodology

Based on ~30 public sources: Reddit threads, CVE databases, official case studies, and pricing pages.

Read how a report is made.

Sources

  1. SigNoz homepagesignoz.io
    official
  2. SigNoz Pricingsignoz.io
    official
  3. SigNoz GitHub repositorygithub.com
    official
  4. Why isn't SigNoz popular? - Reddit r/kubernetesreddit.com
    review
  5. Does anyone using Signoz experience problems with the UI? - Reddit r/devopsreddit.com
    review
  6. Who uses Signoz in production - Reddit r/devopsreddit.com
    review
  7. Open source Datadog rival SigNoz lands on the cloud with $6.5M - TechCrunchtechcrunch.com
    news
  8. CVE-2026-57955: SigNoz SQL injection - VulnCheckvulncheck.com
    security
  9. CVE-2026-63094: SigNoz auth bypass - SentinelOnesentinelone.com
    security
  10. CVE-2026-93292: SigNoz SQL injection - Rapid7rapid7.com
    security
  11. SigNoz vs Middleware ratings - RFP.wikirfp.wiki
    review
  12. DeepCube vs SigNoz cost comparison - Immersive Fusionimmersivefusion.com
    review

Add this review to your site

This check for SigNoz says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends SigNoz Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.