{
"canonical_url": "windmill.dev",
"category": "Open-source project",
"classification": {
"matched": {
"business": [
"business",
"teams",
"workflow"
],
"technology": [
"code",
"coding",
"orchestration",
"python",
"typescript"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "SOC 2 Type II: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.windmill.dev/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "ffb07f49de865b202da7ea0aed5f5770144823807a769bdca55eda8d2295197c",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:15Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "SOC2_TYPE_II"
}
],
"deployment": "self-hosted",
"description": "Code-first platform for workflows, apps and AI agents, on the fastest self-hostable orchestrator (benchmarked against Airflow, Prefect and Temporal). Business teams build with AI, engineers control what ships. Open-source alternative to Lovable, Retool and n8n.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 24.7,
"docs": 7.0,
"domain_fit": 71.3,
"ecosystem": 3.0,
"governance": 3.8,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.713,
"evidence_coverage": 1.0,
"governance_credited": {
"soc2": 0.15
},
"profile": "general",
"rank": null,
"score": 70.7,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"technology": {
"components": {
"adoption": 24.7,
"docs": 7.0,
"domain_fit": 87.5,
"ecosystem": 3.0,
"governance": 3.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.875,
"evidence_coverage": 1.0,
"governance_credited": {
"soc2": 0.15
},
"profile": "technology",
"rank": null,
"score": 75.2,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "windmill-labs/windmill"
},
"first_seen": "2026-10-26T12:12:50Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_2deabb7a3d3838fd",
"identity": {
"evidence": [
"vendor_domain_product_page"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 11,
"incidents": 0,
"links": [
{
"date": "2024-09-05",
"kind": "cve",
"title": "CVE-2024-8462",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8462"
},
{
"date": "2026-02-20",
"kind": "cve",
"title": "CVE-2026-26964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26964"
},
{
"date": "2026-03-06",
"kind": "cve",
"title": "CVE-2026-29059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29059"
},
{
"date": "2026-03-27",
"kind": "cve",
"title": "CVE-2026-33881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33881"
},
{
"date": "2026-04-07",
"kind": "cve",
"title": "CVE-2026-22683",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22683"
},
{
"date": "2026-04-07",
"kind": "cve",
"title": "CVE-2026-23696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23696"
},
{
"date": "2026-05-19",
"kind": "cve",
"title": "CVE-2026-47107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47107"
},
{
"date": "2026-08-11",
"kind": "cve",
"title": "CVE-2026-72539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72539"
},
{
"date": "2026-08-11",
"kind": "cve",
"title": "CVE-2026-72541",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72541"
},
{
"date": "2026-08-11",
"kind": "cve",
"title": "CVE-2026-72542",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72542"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:12:50Z",
"license": "Other",
"name": "windmill",
"news": [
{
"cluster_size": 1,
"date": "2026-10-25T15:58:21Z",
"headline": "windmill release v1.849.0",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## [1.849.0](https://github.com/windmill-labs/windmill/compare/v1.848.3...v1.849.0) (2026-10-25)\n\n\n### Features\n\n* per-user Anthropic Workload Identity Federation for Windmill AI ([#11998](https://github.com/windmill-labs/windmill/issues/11",
"tag": "product_update",
"url": "https://github.com/windmill-labs/windmill/releases/tag/v1.849.0"
},
{
"cluster_size": 1,
"date": "2026-10-25T02:29:26Z",
"headline": "windmill release v1.848.3",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## [1.848.3](https://github.com/windmill-labs/windmill/compare/v1.848.2...v1.848.3) (2026-10-25)\n\n\n### Bug Fixes\n\n* pin node to 24.22.1 in the worker image for CVE-2026-111497 ([#11995](https://github.com/windmill-labs/windmill/issues/11995",
"tag": "product_update",
"url": "https://github.com/windmill-labs/windmill/releases/tag/v1.848.3"
},
{
"cluster_size": 1,
"date": "2026-08-21T18:50:57Z",
"discussion_url": "https://news.ycombinator.com/item?id=49392365",
"engagement": 11,
"headline": "Windmill.dev is not \"fully open-sourced (AGPLv3)\"",
"kind": "community",
"link_confidence": 0.88,
"outlet": "Hacker News",
"summary": null,
"tag": "product_update",
"url": "https://news.ycombinator.com/item?id=49392365"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:24:15Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:24:13Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_at": "2026-10-26T12:24:16Z",
"parser_version": "mcp-2025-06-18",
"status": "not_found"
}
},
"publisher_domain": "windmill.dev",
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:41:51Z",
"cves": 11,
"source": "nvd",
"tier": 1
},
"signals": {
"github_archived": false,
"github_created_at": "2022-05-05T02:21:17Z",
"github_forks": 1128,
"github_language": "Rust",
"github_open_issues": 870,
"github_pushed_at": "2026-10-26T12:10:52Z",
"github_stars": 18270,
"github_topic": "ai-agents",
"homepage": "https://windmill.dev"
},
"slug": "windmill-labs-windmill",
"sources": [
{
"payload_hash": "6df92b3df68576bb69e1682e253b5ca28bcf7bdf991c244a0ed3e8db137ec0ed",
"retrieved_at": "2026-10-26T12:12:50Z",
"system": "github",
"url": "https://github.com/windmill-labs/windmill"
}
],
"tags": [
"ai-agents",
"airflow-alternative",
"internal-tools",
"open-source",
"orchestration",
"postgresql",
"python",
"rust",
"self-hostable",
"self-hosted",
"typescript",
"vibe-coding",
"workflow-engine"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 3,
"protocols": 5,
"security": 1,
"traces": 5,
"vendor_compliance": 4
},
"url": "https://windmill.dev",
"vendor": "windmill-labs"
}