Running n8n self-hosted means the software is free but the server, updates, backups and security are all yours. For most small businesses that costs more in staff time than the €20 a month n8n charges for its cloud Starter plan, and it only pays off at high volumes, under strict data rules, or when someone technical is on the payroll.
n8n is an automation tool that joins up the apps you already pay for, so when an order lands in Shopify, n8n raises the invoice, updates the CRM and tells the warehouse without anybody copying and pasting. Self-hosting means installing n8n's free Community edition on a server you rent and control, rather than paying n8n to run it for you. Most of the pages ranking for this search are install guides for developers, and we'd rather talk about the bill and the risk, because those are what decide whether it's a good idea.
The short version
- Self-hosted n8n is free to download, but you take on the server, updates, backups and security that n8n Cloud handles from €20 a month billed annually.
- Cheap servers got dearer in 2026: Hetzner's CPX22 rose from €5.99 to €19.49, so the hosting saving over Cloud Starter has largely gone.
- The Ni8mare flaw was fixed in November 2025, yet 59,558 n8n servers were still exposed online in January 2026 because nobody had updated them.
- Back up n8n's encryption key separately from the database, or a restore brings back your workflows with every connection broken.
- Self-hosting earns its keep at high, steady volumes, for long-running jobs or strict data-location rules, and when someone technical owns the patching.
What does self-hosting n8n actually cost?
n8n Cloud charges by executions, meaning one complete run of a workflow however many steps it has. Starter is €20 a month billed annually for 2,500 executions and Pro is €50 for 10,000, according to n8n's pricing page. That sounds generous until you do the sum n8n itself suggests, because a single workflow that checks something every five minutes uses about 8,600 to 8,900 executions a month on its own.
The self-hosted Community edition doesn't charge per execution at all, so you pay for a server instead, and that saving shrank this year. The usual advice is a cheap VPS, which is a virtual private server rented by the month, and Hetzner has long been the favourite. After two price rises in 2026, its CX23 has gone from €2.99 at launch to €5.49 and can't currently be ordered, while the CPX22 went from €5.99 to €19.49, Bitdoze reports. Hetzner blamed component costs, and memory prices in particular have soared on the back of AI demand, Data Center Dynamics explains.
So a comfortable server now costs roughly what Cloud Starter does, and the bigger cost is hours. Somebody has to apply updates, watch disk space, check the backups ran and notice when a workflow has quietly stopped. Those hours rarely appear on a spreadsheet, and they usually land on whoever set the thing up in the first place.
Security patching is the job that gets skipped
The Ni8mare flaw in early 2026 is the example to remember. n8n published the fix on 18 November 2025, but the advisory didn't go out until 7 January 2026. It scored 10.0 on the standard severity scale, which is the highest possible, and a working exploit went public the same day, according to Rapid7. That weekend the Shadowserver Foundation counted 105,753 unpatched n8n servers exposed online, and by the Sunday 59,558 were still exposed, more than 21,000 of them in Europe, BleepingComputer reported.
It wasn't a one-off either. A separate n8n flaw still had 24,607 instances unpatched on 5 February, and in March the US cybersecurity agency CISA added it to its list of vulnerabilities being actively exploited, SC Media noted.
Businesses that updated in November were safe seven weeks before anyone had heard the name. On n8n Cloud the vendor does that patching for you, but on your own server nobody does it unless it's in someone's diary. That matters, because an n8n server is worth breaking into. It holds the passwords and API keys it uses to log into your CRM, your accounts package, your inbox and your AI tools. If you already run one on the open internet, an authorised test such as Barb will show you what an attacker sees.
Your data and your backups become your problem
n8n Cloud keeps customer data on servers in Frankfurt, while a self-hosted install keeps it wherever you put it, n8n says. That's a real attraction if a client contract insists on UK hosting, but it also makes you the one answering for that data, which means deciding who can log in, where the backups go and how long the execution history holds copies of customer records.
Backups have a trap that most people find too late. n8n encrypts every stored password with a key created when the server is first set up, and if you back up the database without that key, a restore gives you all your workflows with every connection broken. It's a bit like keeping the spare house key inside the house. So the key needs to live somewhere safe and separate, and the restore needs a test run long before you need it for real.
There are two more catches in n8n's own documents. In the free Community edition only the instance owner and the person who created a workflow or credential can access it, the edition comparison says, so the business can end up depending on one person's login. And the licence allows free use to run your own business, but not letting clients build or edit workflows on your instance, according to n8n's licence FAQ.
When is n8n self-hosted better than the cloud plan?
Self-hosting wins when volume is high and steady. Tens of thousands of runs a month cost nothing extra on your own server, whereas Cloud Starter allows five executions at once and stops any run after five minutes, with Pro allowing 40, and long AI jobs or big file processing hit those ceilings quickly. It also wins when you need custom nodes or scripts, which n8n only offers on your own server, or when your data has to stay in a particular place.
For most firms running a handful of workflows without an in-house developer, though, the cloud is the better bet, and n8n's own guide points anyone lacking technical expertise to Cloud. Patching, backups and uptime become n8n's job for €50 a month or less. If you later need single sign-on, separate test and live environments or version control, the self-hosted Business plan costs €667 a month billed annually, with 50% off for qualifying companies under 20 employees.
We'd start on Cloud Pro, find out which automations actually earn their keep, and move to your own server once volume or data rules make the case. If you're still choosing a tool at all, we compared the options in Zapier vs Make vs n8n.
What mistakes leave self-hosted n8n broken or exposed?
Most of them come from decisions made on day one and never revisited. The big one is leaving updates until there's time, which is how tens of thousands of servers were still open weeks after the Ni8mare fix. Close behind is putting the editor and every webhook, the public web address other apps call to start a workflow, on the open internet with no extra protection, and restricting those public endpoints was the only stopgap BleepingComputer could point to for Ni8mare.
Backing up the database but not the encryption key, and never trying a restore, is another. So is choosing the smallest server and then losing a night's orders when a large file or AI run crashes it and no error alert tells anyone. If you move the server to a new web address without telling n8n, apps like Stripe will keep sending events somewhere that no longer answers. And letting one person own every workflow and every password is a risk you tend to discover when they're on holiday.
Ask who patches it on a Friday afternoon
Before self-hosting, we'd ask one question. When the next 10.0 flaw drops, whose job is it to update the server that day? If there's a clear name, self-hosting can save money and give you real control over your data. If there isn't, pay for Cloud, or have someone run it properly for you, which is part of the AI automation work we do at Swarm Labs.
Tell us what you want to automate and we'll tell you honestly which option fits.
Sources
- n8n: Plans and Pricing
- n8n Docs: Choose how to use n8n
- n8n Docs: Compare editions
- n8n Docs: License FAQ
- Rapid7: Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n
- BleepingComputer: Max severity Ni8mare flaw impacts nearly 60,000 n8n instances
- SC Media: CISA adds n8n RCE flaw to list of known exploited vulnerabilities
- Bitdoze: Hetzner Cloud pricing after the 2026 increases
- Data Center Dynamics: Hetzner hikes prices by up to 50 percent due to component price increases