Dify

C▲ 0 vs last quarter

Rate this tool Add to compare

Dimension breakdown

Score · confidence

UX / DX

50% conf70

Capability

50% conf60

ReliabilityIncomplete data at this time

Value

50% conf75

CommunityIncomplete data at this time

Enterprise / Compliance

50% conf25

Autonomy

50% conf55

Integration

50% conf70

Sources blend review platforms, community sentiment, the Signal Radar and practitioner ratings. Scores re-blend each quarter.

Open-source low-code LLM application development platform with 138K+ GitHub stars (April 2026) — the largest agent-framework footprint measured by stars, ahead of Flowise (~40K) and near n8n (~130K). 1M+ deployed apps, 180K+ developers, 400+ model integrations. Combines visual workflow orchestration, RAG pipeline, agent framework, and model management in a single self-hostable platform.

Community Edition is free forever; Dify Cloud Professional at $59/mo. Founded March 2023 by the LangGenius community; recent v1.9.0.

Viability is strong on community adoption; monetization is less proven than LangChain peers.

Caution

the DifyTap disclosure (2026-06-22) includes an unpatched CVE-2026-41948 (CVSS 9.4, unauthenticated cross-tenant path traversal via the Plugin Daemon API) — fix pending as of disclosure; 3 sibling CVEs fixed in 1.14.2 — triggering a critical-security-vuln cap until patched.

Recommended

Use cases

Not yet assessed — this section fills in as ACES research covers the tool.

Score caps

Risk flags

Critical security vuln
securityTemporary
Unpatched critical security vulnerability
Caps Enterprise / Compliance at 25
Removed when — CVE patched and verified, or security incident resolved with post-mortem published

Assessment

Status rationale

Detected. Dify has the largest agent-framework GitHub star count measured in this catalog (138K+ as of April 2026), 1M+ deployed apps, and 180K+ developers — a clear community signal.

Held at Detected because: (1) no internal hands-on evaluation performed (handsOn=not_tested), (2) monetization and enterprise revenue are less proven than LangChain peers at this evaluation depth, and (3) this is an initial desk evaluation at moderate depth.

Watch for

Movement triggers

Upgrade to Tracked if: additional enterprise customer references documented, commercial revenue trajectory confirmed, and/or SOC 2 or formal compliance certification verified. Upgrade to Assessed if: internal hands-on evaluation completed with documented pilot results.

Downgrade if: community momentum reverses materially or monetization fails to develop beyond the Community Edition.

Caution