The real costs and risks of n8n fair-code automation

The fair-code and security reality

n8n uses a fair-code license that prevents commercial hosting of its software for others. This licensing model means it fails the OSI-approved open source criteria. Security teams must note that n8n recorded five critical CVEs in 2026. One flaw, CVE-2026-21858, scored a 10.0 CVSS for unauthenticated remote code execution. Three more flaws dropped in May 2026, including CVE-2026-44789 for prototype pollution. Manifold Security found a 9.6 cross-tenant credential theft bug in June 2026, which attackers used to access API keys. These vulnerabilities show that technical users must manage their own security posture. Founder Jan Oberhauser built the Berlin-based company to provide low-code solutions for developer teams. n8n raised $180 million in a Series C round in October 2025 at a $2.5 billion valuation, led by Highland Europe. The company has 200,000 active users and 3,000 enterprise customers. While the company grows, the decision to self-host requires managing your own updates, backups, and uptime. This differs from Make, which handles infrastructure management and security patches on the vendor side. Self-hosting provides data residency and control over execution volume, but it requires sufficient DevOps expertise to prevent downtime.

Pricing models and integration limits

The pricing gap between n8n and Zapier stays wide because they use different billing logic. Zapier charges for every individual task performed. While Zapier charges for every individual task performed, n8n counts a single execution as one complete run regardless of whether that specific workflow contains two nodes or forty nodes in its total automated sequence today. For an 8-step workflow running 10,000 times, n8n Pro costs $60 while Zapier costs roughly $299. For a 10-step workflow with 5,000 runs, Zapier requires 50,000 tasks, but n8n only counts 5,000 executions. n8n provides 400+ nodes, whereas Zapier provides over 7,000 integrations.

Make provides a flowchart-style builder that helps newcomers feel productive. n8n provides finer control over inputs and outputs via a node-based canvas. n8n supports nested subflows and callable workflows for complex logic. Zapier Professional starts at $19.99 for 750 tasks.

AI orchestration and the final verdict

n8n performs well in agentic automation because it treats AI nodes as first-class components. It integrates with LangChain and supports local LLMs via Ollama. This allows for RAG pipelines and multi-step reasoning. A custom agent in n8n includes a trigger, an AI model, logic nodes, and output actions. You can use a webhook to start a process, an LLM to analyze data, and JavaScript to route the response. The workflow uses triggers like webhooks or schedules, LLM connections like OpenAI or Claude, and integrations with tools like Slack or Google Sheets. n8n’s community has published over 500 custom nodes on npm to extend functionality. Zapier treats AI as a premium add-on feature. Zapier works for users who want to build a simple Zap in five minutes. I recommend n8n for technical teams building complex AI agents. Will the security landscape for fair-code tools stabilize?