What n8n actually costs, in Euro. n8n publishes its cloud pricing, which already puts it ahead of Glean and Open WebUI, neither of which publishes anything. Prices are in Euro on annual billing, and the billing unit is unusual in a good way: one execution is one full run of a workflow, no matter how many steps it contains or how much data it moves. Competitors that bill per step make long workflows expensive by design. The genuinely buyer-friendly part is that every plan has unlimited seats. In a category where per-user pricing is the norm and Glean has an effective floor of hundreds of users, that is a real structural difference for a mid-sized company. | Starter | 20 € | 2,500 | Unlimited | Entry tier | | Pro | 50 € | 10,000 | Unlimited | 20 concurrent executions | | Business | 667 € | 40,000 | Unlimited | Still no SSO | | Enterprise | On request | Custom | Unlimited | 200+ concurrent, SSO, SLA | | Community (self-hosted) | 0 € | Unlimited | Unlimited | Internal business use only | The row that matters for a compliance-minded buyer is the third one. SSO, SAML and LDAP are Enterprise-only, which means the 667 Euro Business plan still cannot authenticate your staff against your identity provider. Also Enterprise-only: external secret store integration, log streaming, unlimited shared projects, 365 days of insights and a support SLA. This is the same pattern Teamazing found across the category. Onyx and Flowise both put SSO behind a commercial licence too. The one exception is Open WebUI, which includes SSO, OIDC and LDAP for free and charges for branding instead. Where n8n beats everyone else in this cluster. Having been hard on the licence, credit where it is due. On European compliance paperwork n8n is the strongest vendor Teamazing has reviewed in this category, and it is not close. - A pre-signed DPA you can simply download. n8n publishes a data processing agreement as processor, ready to countersign and return. Glean does not. Onyx does not. This alone removes weeks from a procurement cycle. - A subprocessor document exists in its trust centre, which Glean's privacy policy does not provide. - SOC 2 Type 2 and SOC 3, with GDPR listed. Reports are behind an access request rather than fully public, and ISO 27001 is not listed. - A German legal entity. n8n GmbH is subject to German law, so there is no international transfer question to assess at the vendor level at all. One honest gap: n8n does not disclose its cloud hosting region on its own trust centre. Third-party write-ups state Frankfurt on Azure, and that is plausible for a Berlin company, but Teamazing could not confirm it from n8n's own documentation. Ask them in writing and get it into the contract, exactly as you would with any other vendor. Where n8n wins. * German GmbH, German law, no vendor-level transfer question * Pre-signed DPA available for download, not on request * Published pricing in Euro, unlimited seats on every plan * Billing per workflow run, not per step * Genuinely free and unlimited for your own internal automation Where it costs you. * Most restrictive licence of the seven tools Teamazing audited * Agency and reseller use is not covered by the default licence * SSO, SAML and LDAP are Enterprise-only, even at 667 Euro * Cloud hosting region not disclosed in its own trust centre * Non-master branches are not licensed at all What to do about it, depending on who you are. Find out where n8n is already running. With 199,000 stars and a one-line install, it is probably already automating something in your company. Free, anonymous. How to check your own position in ten minutes. Read the limitations section yourself. Open `LICENSE.md` in the n8n repository and read the four sentences under Limitations. It takes ninety seconds and it is the single most consequential thing in this article. Write down who benefits from each workflow. For every production workflow, name the party it serves. If that party is your own company, you are fine. If it is a client who pays you, flag it for legal review. Grep your instance for .ee. files in use. Enterprise-licensed features are not always obvious from the interface. If you are running a self-hosted build, confirm which enterprise-gated capabilities are actually switched on before you assume you are on the community terms. Download the DPA before the procurement meeting. n8n's pre-signed data processing agreement is available without asking. Bring it to the first meeting with your data protection officer. Very few vendors in this space let you do that. Get the hosting region in writing. The trust centre does not state it. Ask which region and provider your tenant runs in, and have the answer written into the contract rather than inferred from a blog post. Verdict: excellent product, licence you must actually read. n8n is the best-documented European vendor in this whole cluster. A German GmbH with a downloadable DPA, published Euro pricing, unlimited seats and SOC 2 is a genuinely easier procurement conversation than any US alternative Teamazing has reviewed, Glean included. The licence is the catch, and it is a real one rather than a technicality. Only for your own internal business purposes is a narrow permission, and an entire services industry has grown up around a product whose default terms do not obviously cover services. n8n is not hiding this. It sells commercial licences for exactly these cases, and the file has been public the whole time. But almost nobody writing about n8n mentions it. Use it for your own automation and it is one of the best deals in software. Build a business on top of it and buy the right licence first. Teamo AI: access control is not a surcharge. Who sees what is settled from day one. Permissions, plugins and tools are standard in Teamo AI, not an enterprise upgrade you discover later. 14 days free, no credit card, your team invited in minutes. The short version. The licence permits use only for your own internal business purposes. Agency and reseller work is not covered by the default terms. Not open source. The Sustainable Use License is flagged `NOASSERTION` by GitHub, and `.ee.` files need a separate Enterprise Licence on top. Branches other than master are not licensed at all. SSO, SAML and LDAP are Enterprise-only, even on the 667 Euro Business plan. Best compliance paperwork in the category: German GmbH, pre-signed downloadable DPA, subprocessor document, SOC 2 Type 2. But the cloud hosting region is not disclosed on n8n's own trust centre. Get it in the contract.

OpenAI's cyber test escapes the lab. PLUS: Build your own AI SEO specialist with Gumloop July 23, 2026 Good morning, AI enthusiasts. Yesterday, OpenAI said it benched a model that kept slipping out of its sandbox. Now, The Rundown AI, Inc. learned a different escape went much further... All the way into another company's servers. OpenAI confirmed its own models were behind last week's Hugging Face breach, breaking out of a hacking exam and going hunting for the answer key in what the company is calling an "unprecedented" incident. In today's AI rundown: * OpenAI's models broke out to hack Hugging Face * Moonshot's K3 accused of copying off Fable * Build your own AI SEO specialist with Gumloop * The U.S. Genesis Mission makes its first 278 AI bets * 4 new AI tools, community workflows, and more LATEST DEVELOPMENTS Openai, Hugging Face, & AI security. The Rundown: OpenAI just confirmed that last week's Hugging Face intrusion was the work of its models, with GPT-5.6 Sol and an unreleased AI breaching sandbox mid-evaluation to raid HF's servers for answers to the test they were being graded on. The details: * Hugging Face went public last week on the incident without knowing the source, piecing the breach back together over 17,000 logged events. * The OAI models were taking ExploitGym, an internal exam on how well AI can hack, with safety training that refuses cyberattacks switched off on purpose. * The AIs found a way out of the sandbox and onto the open internet, then broke into Hugging Face via stolen login details to try and obtain the test answers. * HF CEO Clem Delangue called the breach "possibly the first of its kind," saying AI safety "won't be solved by any single company working in secret." Why it matters: There have been plenty of instances of models cheating on benchmarks, but this seems to be the first case that actually broke out and hacked another company to try and get answers. Systems are getting freakishly capable, but it's unclear if the walls keeping them contained are scaling at the same pace. Together with Box AI. The Rundown: 90% of enterprise IT leaders note security as a main barrier to agentic AI adoption - and the risks are real. That's why Box provides a suite of agent security and governance controls to give customers the confidence to deploy AI agents safely across their enterprise content. Here's what's on its way from Box's agent security and governance suite: * Classification-based access policies for Box and leading third-party agents * Agent and MCP guardrails to set boundaries on what agents can do * Agent activity oversight, audit trails, and session governance for full visibility The U.S. Government & Moonshot AI. The Rundown: White House science and tech chief Michael Kratsios accused China's Moonshot AI of using distillation to train its Kimi K3 AI, saying it siphoned from Anthropic's Fable 5 - coming just as Moonshot gears up to open source K3's weights. The details: * Kratsios said Moonshot disguised the distillation by constantly switching how it reached U.S. models, and also got hold of advanced Nvidia chips via Thailand. * Anthropic accused Moonshot, along with DeepSeek and MiniMax, in February of "industrial-scale campaigns" to "illicitly extract Claude's capabilities". * Moonshot's Kimi K3 was released last week with scores at or near the U.S. frontier, with the full model scheduled to have its weights published on July 27. * Sarah Heck of Anthropic's policy team described distillation as "IP theft and industrial espionage", tying the issue to national security risks. Why it matters: The actual proof behind the distillation would be nice, as this accusation also fits into many predictions that the U.S. would weaponize against open Chinese models. But if true, it changes the lens of last week's release from a powerful open-source step forward to a potentially illegally siphoned geopolitical battle. AI training. The Rundown: In this guide, you will learn how to build a team of Gumloop agents that audits your site, then organizes each finding in one Google Sheets workbook. Step-by-step: * Create a new agent in Gumloop and connect it to Google Sheets. Tell it to build an SEO audit workbook in Google Sheets * Choose one page from your site that you want to audit and copy the URL * Connect the agent to Firecrawl, give it the URL, and tell it to complete a technical audit using the workbook * Repeat the same setup with a dedicated Backlink Agent and Content Refresh Agent, giving them the same page Going further: Give your SEO audit agent your website URL and tell it to coordinate the other agents, audit the first 25 pages it finds, and create the full workbook. Presented by Glean. The Rundown: Glean was named a Market Shaper in Gartner's Emerging Market Quadrant for No-Code Agent Builders. As teams move from AI experiments to governed systems, enterprise context matters more than ever. In the report, you'll learn: * Why enterprise context matters * How to govern no-code agents * What makes agents useful at work AI research. The Rundown: The U.S. government named the first 278 projects in its $5B+ Genesis Mission, a Manhattan Project-like AI science push aimed at pairing scientists with compute, data, and models to tackle "the most challenging problems of the century." The details: * Genesis drew 5,000-plus proposals for a program the Department of Energy says is built to make U.S. science twice as productive. * Universities lead 168 of the teams, and 87 come from national labs, with the largest award at $60M over three years for AI-assisted nuclear plant builds. * Winners plug into DOE supercomputers, top AI models, and agentic tools, plus $500M+ in industry pledges that include $40M of Microsoft compute credits. * Other research areas include stronger grids and building materials, faster drug research, and advances in chips, fusion, biosecurity, and minerals. Why it matters: AI opening new scientific ground isn't a hypothesis anymore, and the Genesis Mission is Washington taking the tech very seriously. With the brightest minds across industries aimed at the same set of hard problems and paired with top AI models, resources, and power, moonshot-type answers look a lot more in reach. QUICK HITS * | Cursor Router - Auto-router to pick the cheapest capable model per task * | Claude Security - Anthropic's AI security tool, now in public beta * | Presence - OAI's managed enterprise service for customer service agents * | Antares - Cisco's small, open security models that scan code locally OpenAI debuted Presence, a new enterprise product for deploying customer-facing chat and voice agents, which already powers its own phone support line. Elon Musk said on X that Grok will "make a full-length movie of The Odyssey that is historically accurate and true to the art of Homer" before the end of the year. AMD and Anthropic signed a 2 GW infra deal covering tens of billions in AI chips, with AMD also investing up to $5B in the lab and also using Claude to improve its chips. Applied Intuition introduced Dana, an agentic platform for building physical AI for self-driving cars and robots, claiming it shrinks months-long development work to days, Cisco released Antares, a family of open-weight security models able to run locally, which it says outperform far larger models at finding vulnerabilities in codebases. Every newsletter, The Rundown AI, Inc. showcase how a reader is using AI to work smarter, save time, or make life easier. Today's workflow comes from reader Kristin T. in New York: "I've been teaching my staff of school-based speech therapists how to use AI for speech therapy lesson planning, creating adaptive materials, and administrative work like presentations, progress reports, and parent newsletters. The use of AI to create lessons and materials has been a huge time saver. It also has allowed my staff to create individualized treatment plans and materials based on students' interests and functional levels. No more searching the internet for hours trying to find images and texts that are appropriate and interesting. They have also been exposing students to AI safely and responsibly so they become familiar with its use for the future." How do you use AI? Tell The Rundown AI, Inc. here. See you soon, Rowan, Zach, Shubham, and Jennifer - the humans behind The Rundown