n8n
Open source workflow automation platform that combines visual building with full code flexibility. 400+ integrations, AI agent capabilities, and self hosting option. SECURITY ALERT: Critical vulnerabilities discovered in 2025/2026, including a CVSS 10.0 severity exploit. Update immediately.
What it is
n8n (pronounced 'n eight n,' short for 'nodemation') is a workflow automation platform that lets you connect apps, APIs, and AI models into multi step automated workflows using a visual drag and drop editor with full code support when you need it. Founded by Jan Oberhauser in Berlin in 2019, n8n uniquely bridges the gap between no code platforms like Zapier and full code scripting. You can build visually and drop into JavaScript or Python whenever the visual builder is not enough. The platform offers 400+ native integrations, built in AI agent capabilities powered by LangChain, and a self hosted option that gives you unlimited executions for free. Backed by $240M in funding (including from Sequoia, Accel, and NVIDIA), n8n has 190,000+ GitHub stars, 200,000+ community members, and is used by companies like Delivery Hero, Microsoft, Meta, and Vodafone. n8n is available as a managed cloud service or as a self hosted deployment via Docker. IMPORTANT: In 2025 and 2026, critical security vulnerabilities were discovered in n8n, including CVE-2026-21858 with a CVSS score of 10.0 (maximum severity). These vulnerabilities have been added to the CISA Known Exploited Vulnerabilities (KEV) catalog, and approximately 24,700 n8n instances were found exposed on the internet. If you are running n8n, update to the latest version immediately and review your security configuration.
Who it is for
Technical teams who want visual workflow building with the escape hatch of full JavaScript/Python when needed
AI engineers building agent workflows, RAG pipelines, and LLM powered automations with visual tooling
Startups wanting a cost effective, self hosted alternative to Zapier or Make with unlimited executions
DevOps and ITOps teams automating infrastructure, employee onboarding, and incident response
Enterprises needing data sovereignty, on premise deployment, and compliance (SOC 2, GDPR)
Teams building complex multi step workflows where per execution pricing saves dramatically over per task billing
Pros and cons
Pros
- +Execution based pricing is dramatically cheaper than per task billing for complex workflows. A 50 step workflow counts as 1 execution in n8n vs 50 tasks in Zapier
- +Free self hosted Community Edition with unlimited executions provides full data sovereignty and zero cost for the core platform
- +Full JavaScript and Python support within workflows, including npm package imports on self hosted, means you are never limited by what the visual builder can do
- +Best in class AI agent integration via LangChain with 70+ AI nodes, agents, RAG, tool calling, and the ability to use any n8n workflow as a custom AI tool
- +190,000+ GitHub stars and 200,000+ community members make it one of the most active open source automation projects, with 9,800+ workflow templates to start from
- +Step by step execution, pinned/mock data, and inline debugging make building and testing complex workflows significantly faster than competitors
- +Enterprise ready with SSO, RBAC, Git based version control and environments, external secret stores, and SOC 2 compliance
Cons
- −CRITICAL SECURITY CONCERN: Multiple critical vulnerabilities discovered (CVE-2025-68613 and CVE-2026-21858 with CVSS 10.0). Both are listed in the CISA KEV catalog as actively exploited, with approximately 24,700 exposed instances identified. Self hosted deployments require immediate patching and security hardening
- −Steeper learning curve than Zapier or Make. Expects familiarity with APIs, data structures, and JSON. Not ideal for non technical users
- −Fewer native integrations (400+) compared to Zapier (8,000+) or Make (2,500+), though the HTTP Request node and community nodes cover most gaps
- −Self hosting requires DevOps knowledge for production deployments including Docker, database management, scaling, backups, and critically, timely security patching. Recent CVSS 10.0 vulnerabilities underscore the risk of unmanaged self hosted instances
- −Not truly open source by OSI definition. The Sustainable Use License restricts commercial redistribution and white labeling
- −Cloud plans cannot use npm packages, custom nodes, CLI access, or bash scripts. These capabilities are self hosted only
- −Forum only support on Starter, Pro, and self hosted Business plans. Dedicated support with SLA requires Enterprise pricing
Pricing
- Unlimited executions
- Unlimited workflows and users
- All 400+ integrations
- 2,500 executions per month
- 5 concurrent executions
- 1 shared project
- 10,000 executions per month
- 20 concurrent executions
- 3 shared projects
- 150 AI Workflow Builder credits
- 40,000 executions per month
- 6 shared projects
- SSO (SAML/LDAP)
- Custom execution limits
- 200+ concurrent executions
- Unlimited shared projects
Prices change; check the official pricing →