# Windmill

Code-first orchestration platform for internal software

Source: https://wheredoirunthis.com/products/windmill · JSON: https://wheredoirunthis.com/api/products/windmill · Read on 2026-10-15

## At a glance

- Type: Workflow engine
- Kind: Open core
- Isolation: Container
- Free tier: Yes
- Starting price: $10/mo per seat
- GPU: No
- Regions: Not disclosed
- Coverage: 23 of 61 assessed capabilities supported
- Agent readiness: read 9.5 of 11 signals, drive 9 of 11 signals

## Links

- Homepage: https://www.windmill.dev/
- Docs: https://www.windmill.dev/docs
- Pricing: https://www.windmill.dev/pricing
- Repository: https://github.com/windmill-labs/windmill

## Pricing

- Model: Hosted Cloud Free; Team seat-based with execution quota; Enterprise dedicated core + seats + Compute Units. Self-host licensing is recorded under source.self_host, not this ladder.
- Unit: USD per month; Team developer/operator seats; Enterprise core + seats + worker Compute Units
- Free tier: Yes

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Free | $0/month | 1,000 executions/month; unlimited variables/resources/scripts/apps/flows except abuse; Google/GitHub/GitLab SSO; community support |  [source](https://www.windmill.dev/pricing) |
| Team | $10/developer/month or $5/operator/month | Per developer seat; operator $5/month, each seat includes one developer or two operators and 10k executions/month; max10 seats; audit retention7days; One developer or two operators per seat. |  [source](https://www.windmill.dev/pricing) |
| Enterprise | from $840/month; default 1 developer + 3 CU = $940/month | Published from price $840/month; components core $600/month + developer $40/month (operator $20/month) + standard worker $100/month/CU, 2GB memory. Default simulator 1developer+3CU=$940/month. Dedicated workers/database, unlimited execution, SLA. Do not treat base $840 as included3CU. | Published starting total, not a per-seat base or promise of 3 included CU; simulator default $940. $600 core + $40/developer + $20/operator + $100/CU monthly. [source](https://www.windmill.dev/pricing) |

- Overages: Team includes 10k executions per seat/month, maximum 10 seats; no execution-overage price confirmed. Enterprise core $600/month, developers $40/month, operators $20/month, standard workers $100/CU/month; shown standard worker memory limit 2GB. Eight native subworkers count as one CU. No storage/egress rate invented.
- Card required: No
- Source: https://www.windmill.dev/pricing

## Website design

Desktop public website · assessed 2026-10-15

Complete assessment.

A restrained blue-and-white technical business site: an illustrated two-column landing hero, spacious rounded pricing cards, and a denser three-column documentation shell.

- Styles: Corporate, Technical illustration
- Landing page: captured
- Pricing: captured
- Docs: captured

## Runtime

- **GPU & accelerators**: No advertised first-party Cloud GPU offering. [source](https://www.windmill.dev/llms.txt) (confidence: medium)
- **BYOC (Bring your own cloud)**: Self-host available, no separately advertised managed BYOC product. [source](https://www.windmill.dev/docs/advanced/self_host) (confidence: medium)
- **Secrets management**: Encrypted Variables & Secrets; job-scoped WM_TOKEN; OIDC workload identity; external secret backends Enterprise. [source](https://www.windmill.dev/docs/core_concepts/variables_and_secrets) (confidence: high)
- **Storage options**: Cloud workspace object storage all plans, Enterprise unlimited; Data Tables managed via instance Postgres; DuckLake; externally connected stores. [source](https://www.windmill.dev/docs/core_concepts/persistent_storage/data_tables.md) (confidence: high)
- **Supported workloads**: scripts 20+languages, durable flows, full-code/low-code apps, AI agent steps and external MCP tools, Claude Code/Codex/OpenCode sandbox scripts, Windmill AI sessions, data pipelines (alpha), dbt, scheduled jobs [source](https://www.windmill.dev/docs/intro.md) (confidence: high)
- **Persistence**: Volumes are object-storage sync before/after runs, persistent agent memory.20 volumes/workspace and50MB/file CE limit; Enterprise full support. [source](https://www.windmill.dev/docs/core_concepts/volumes.md) (confidence: high)
- **Data jurisdiction**: Public hosted compute placement not established; San Francisco/Paris are company locations, not regions. [source](https://www.windmill.dev/docs/enterprise/plans_details.md) (confidence: medium)
- **Resource limits & quotas**: Hosted Free1000executions/mo; Team10k/seat/mo max10seats; Enterprise dedicated compute. Self-host CE3workspaces50users4groups is separate. [source](https://www.windmill.dev/pricing) (confidence: high)
- **SDK languages**: Python, TypeScript/Deno/Bun, Rust, Go, PowerShell [source](https://github.com/windmill-labs/windmill) (confidence: high)
- **Network & egress controls**: Optional nsjail network namespace and operator worker separation; not documented per-job Cloud outbound allowlist. [source](https://www.windmill.dev/docs/advanced/security_isolation) (confidence: medium)
- **Snapshots & forks**: No evidence of running-compute snapshots/memory snapshots. Workspace/data-table forks are distinct development/database feature. [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox) (confidence: medium)
- **Deployment methods**: dashboard, cli, api, sdk, mcp, container-image, template [source](https://www.windmill.dev/docs/advanced/local_development) (confidence: high)
- **Isolation**: Container — "container; disclose jobs are processes, optional nsjail, PID namespaces disabled by default in generic self-host docs; do not assert all hosted jobs guaranteed nsjail without cloud-specific evidence." [source](https://www.windmill.dev/docs/advanced/security_isolation) (confidence: medium)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "A skill is a SKILL.md file; import a folder of skills, up to 50; enabled skills loaded with read_skill when request matches." [source](https://www.windmill.dev/docs/core_concepts/ai_sessions.md) |
| AI app builder | Supported | "AI creates and edits scripts, flows and full-code apps; live preview, review diff and deploy." [source](https://www.windmill.dev/docs/core_concepts/ai_sessions.md) |
| Autonomous QA agent | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party autonomous-qa-agent product." [source](https://www.windmill.dev/llms.txt) |
| Built-in coding agent | Supported | "AI sessions create and edit scripts, flows and full-code apps as drafts, test them as background jobs, review diffs and deploy. First-party Windmill AI chat, not merely external harness hosting." [source](https://www.windmill.dev/docs/core_concepts/ai_sessions.md) |
| BYOK for LLMs | Supported | "AI agents: connect to OpenAI, Anthropic, Mistral, DeepSeek, Gemini and more (your own provider keys)." [source](https://www.windmill.dev/docs/core_concepts/ai_agents) |
| Credential-injection proxy | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party credential-injection-proxy product." [source](https://www.windmill.dev/llms.txt) |
| LLM gateway | Not supported | "Agent steps connect per-step to OpenAI/Anthropic/Mistral/etc.; no unified multi-provider gateway product." [source](https://www.windmill.dev/docs/core_concepts/ai_agents) |
| MCP client | Supported | "AI Agents can connect to MCP (Model Context Protocol) servers as tools, enabling access to any tools exposed by MCP-compatible servers." [source](https://www.windmill.dev/docs/core_concepts/ai_agents) |
| MCP-server hosting | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party mcp-hosting product." [source](https://www.windmill.dev/llms.txt) |
| MCP server | Supported | "Use the Model Context Protocol (MCP) to trigger scripts and flows from Claude, Cursor or any MCP client." [source](https://www.windmill.dev/docs/core_concepts/mcp) |
| Model inference API (first-party) | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party model-inference-api product." [source](https://www.windmill.dev/llms.txt) |
| Preinstalled coding agent | Supported | "Built-in Claude Code template uses @anthropic-ai/claude-agent-sdk and pathToClaudeCodeExecutable: /usr/bin/claude. Codex/OpenCode supported as scripts; do not imply all harnesses preinstalled." [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox.md) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "Windmill Cloud application and generated webhook endpoints are HTTPS; self-host TLS remains operator responsibility." [source](https://app.windmill.dev/) |
| Custom domains | Not supported | "No per-app custom-domain feature advertised (self-host is at your own domain via your proxy)." [source](https://www.windmill.dev/docs/intro.md) |
| Direct public IPv6 | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party direct-ipv6 product." [source](https://www.windmill.dev/llms.txt) |
| Edge KV store | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party edge-kv product." [source](https://www.windmill.dev/llms.txt) |
| Egress controls | Not supported | "nsjail provides process/network-namespace isolation, but no per-workload configurable outbound egress allowlist/firewall." [source](https://www.windmill.dev/docs/advanced/security_isolation) |
| Email send / receive | Partially supported | "Email triggers (run scripts/flows on inbound email); sending via scripts/SMTP." [source](https://www.windmill.dev/docs/triggers.md) |
| Public preview URLs | Not supported | "Apps have draft/preview modes but no per-deploy/per-branch public preview URLs." [source](https://www.windmill.dev/docs/intro.md) |
| Private networking | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party private-networking product." [source](https://www.windmill.dev/llms.txt) |
| Built-in reverse proxy | Partially supported | "Windmill server routes external webhook/HTTP-route/app traffic to scripts/flows/apps." [source](https://www.windmill.dev/docs/triggers.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Partially supported | "RBAC + built-in OIDC provider to authenticate jobs to AWS/GCP/cloud APIs; app authentication." [source](https://www.windmill.dev/docs/core_concepts/oidc) |
| BYOC | Not supported | "Self-host runs in your own infra, but there is no separately-managed BYOC control-plane product (covered by self-host-oss)." [source](https://www.windmill.dev/docs/advanced/self_host) |
| Deploy into customers' VPCs | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party customer-vpc-deploy product." [source](https://www.windmill.dev/llms.txt) |
| Secrets management | Supported | "First-class Variables & Secrets (encrypted) + resources." [source](https://www.windmill.dev/docs/core_concepts/variables_and_secrets) |
| Self-host / OSS core | Supported | "Open-source AGPLv3 Community Edition; self-host via Docker / Kubernetes (Helm)." [source](https://github.com/windmill-labs/windmill) |
| Sharing | Supported | "Public apps (anonymous, no login) Yes on all Cloud plans. Anyone with URL opens anonymously without limit; distinct from guest-app identity-provider sign-in." [source](https://www.windmill.dev/pricing) |
| SSO / SAML | Partially supported | "SSO, SAML and SCIM." [source](https://www.windmill.dev/docs/advanced/saml_and_scim.md) |
| Teams | Supported | "Workspaces + granular RBAC + members." [source](https://www.windmill.dev/docs/intro.md) |
| Workload identity | Supported | "Built-in OpenID Connect provider authenticates scripts to AWS/GCP and other cloud APIs using workload tokens; pricing lists OIDC on all Cloud plans." [source](https://www.windmill.dev/docs/core_concepts/oidc.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "wmill CLI (`npm install -g windmill-cli`; `wmill sync push`)." [source](https://www.windmill.dev/docs/advanced/local_development) |
| E2B-compatible API | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party e2b-compatible-api product." [source](https://www.windmill.dev/llms.txt) |
| Filesystem API | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party filesystem-api product." [source](https://www.windmill.dev/llms.txt) |
| Git deploy | Partially supported | "CLI sync and Deploy from GitHub available; advanced Git sync and automatic fork sync features have edition gating. Cloud pricing lists Git sync all plans; self-host Community up to 2 users." [source](https://www.windmill.dev/docs/advanced/git_sync.md) |
| HTTP data API | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party http-query-api product." [source](https://www.windmill.dev/llms.txt) |
| OpenAPI spec | Supported | "Freshly fetched valid OpenAPI 3.0.3 specification with 716 paths; linked from API reference." [source](https://app.windmill.dev/api/openapi.json) |
| Private container registry | Not supported | "Custom worker Docker images / preinstall binaries, but no hosted first-party private registry." [source](https://www.windmill.dev/docs/advanced/preinstall_binaries) |
| Public API | Supported | "Full REST API; everything in Windmill is API-driven." [source](https://app.windmill.dev/openapi.html) |
| SDK | Supported | "Official clients: python-client, deno-client, go-client, powershell-client (Apache-2.0)." [source](https://github.com/windmill-labs/windmill) |
| SSH access | Not supported | "No SSH into workers as a product feature." [source](https://www.windmill.dev/docs/intro.md) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party cloud-init-config product." [source](https://www.windmill.dev/llms.txt) |
| Desktop / computer-use sandbox | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party desktop-sandbox product." [source](https://www.windmill.dev/llms.txt) |
| GPU compute | Not supported | "No first-party GPU offering; GPU is the operator's choice on self-hosted workers." [source](https://www.windmill.dev/docs/intro.md) |
| Live-state (memory) snapshots | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party memory-snapshot product." [source](https://www.windmill.dev/llms.txt) |
| Multi-region | Partially supported | "Worker groups + agent workers run anywhere (self-host, multi-DC HA on EE)." [source](https://www.windmill.dev/docs/core_concepts/worker_groups) |
| Object storage | Supported | "Cloud feature comparison: Workspace object storage Yes on Free and Team; Unlimited on Enterprise. Self-host CE storage 10GiB; external storage connections separately supported." [source](https://www.windmill.dev/pricing) |
| Persistent disk | Partially supported | "Object-storage-backed file volumes restored before runs and synced after runs, not continuously attached block disks; Enterprise feature with CE limit 20 volumes/workspace and 50MB/file." [source](https://www.windmill.dev/docs/core_concepts/volumes.md) |
| Sandbox templates / custom images | Supported | "Run any container image sandboxed with the # sandbox <image> annotation, daemonless; reusable OCI images supported, not VM snapshots." [source](https://www.windmill.dev/docs/advanced/docker.md) |
| Scale to zero | Partially supported | "Worker autoscaling (EE) scales workers with the queue." [source](https://www.windmill.dev/docs/core_concepts/worker_groups) |
| Selectable isolation runtime | Partially supported | "Per-script sandbox annotation opts into nsjail isolation; default optional isolation settings are operator-controlled, not a choice of microVM hypervisors." [source](https://www.windmill.dev/docs/advanced/security_isolation) |
| Snapshots / forking | Not supported | "Persistent volumes carry state across runs but there is no fork/snapshot of a running job/instance." [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Partially supported | "Data table forking gives independent isolated data copies; Cloud forks paid Team/Enterprise only. Not claimed copy-on-write." [source](https://www.windmill.dev/docs/advanced/workspace_forks.md) |
| Ephemeral instant DB (no-signup) | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party ephemeral-instant-db product." [source](https://www.windmill.dev/llms.txt) |
| First-party database | Supported | "Data Tables store and query relational data with near-zero setup using databases managed automatically by Windmill; custom instance Postgres databases need no external setup." [source](https://www.windmill.dev/docs/core_concepts/persistent_storage/data_tables.md) |
| Vector search | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party vector-search product." [source](https://www.windmill.dev/llms.txt) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Not advertised in freshly fetched documentation index and product/pricing surface; integration or self-managed infrastructure is not a first-party managed-ci-runners product." [source](https://www.windmill.dev/llms.txt) |
| Built-in observability | Partially supported | "Cloud has run logs/results and audit logs; queue metrics, Prometheus, HTTP/OpenTelemetry tracing and S3 service logs are Enterprise-only." [source](https://www.windmill.dev/pricing) |
| Preview environments | Partially supported | "Independent workspace copies include scripts, flows, apps, resources, variables and data tables. Cloud paid plans only, 5 forks/developer seat; not automated full ephemeral PR environments." [source](https://www.windmill.dev/docs/advanced/workspace_forks.md) |
| Scheduled tasks | Supported | "Schedules — run scripts/flows on cron." [source](https://www.windmill.dev/docs/triggers.md) |
| Project template marketplace | Supported | "Windmill Hub offers community scripts, flows and apps to import and customize as project starters." [source](https://hub.windmill.dev/) |
| Durable workflows | Supported | "Flows: DAG durable workflows with retries; 'fastest job orchestrator and workflow engine — 13x vs Airflow'; 'alternative to ... Temporal'." [source](https://www.windmill.dev/docs/intro.md) |

## Agent readiness

### Read: 9.5 of 11 signals present

9.5/11 signals (8 full, 3 partial)

- Llms txt: pass — "https://www.windmill.dev/llms.txt — substantive fresh documentation index retained."
- Llms full txt: pass — "https://www.windmill.dev/llms-full.txt — 2,841,038-byte comprehensive full text fetched; size-capped POINTER retained."
- Robots AI policy: pass — "https://www.windmill.dev/robots.txt — explicit Allow rules for major AI user agents."
- JSON LD: pass — "Homepage JSON-LD includes Organization and SoftwareApplication; retained structural evidence records actual graph."
- Sitemap: pass — "https://www.windmill.dev/sitemap.xml — nontrivial fresh sitemap retained, linked by robots."
- Meta quality: pass — "Homepage title, description and OpenGraph inspected in retained structural evidence."
- Markdown negotiation: partial — "Accept: text/markdown on homepage/docs still returns HTML; explicit docs .md variants succeed and are retained."
- Content efficiency: partial — "Homepage 10,459 readable text bytes / 454,488 HTML bytes = 2.301%; retained structural measurement."
- Docs discoverable: pass — "Homepage header has first-class Docs link; /docs redirects to /docs/intro, both browser and canonical markdown fetched."
- Pricing machine readable: pass — "https://www.windmill.dev/pricing — Cloud/Monthly toggle rendered; Free, Team, Enterprise structured prices and comparison retained separately from default self-host view."
- Anti bot: partial — "Default Python urllib User-Agent got homepage 403; Mozilla User-Agent and fresh anonymous desktop browser succeeded. Public surface accessible but headless UA sensitivity prevents blanket full credit."

### Drive: 9 of 11 signals present

9/11 signals (8 full, 2 partial)

- Public API: pass — "https://app.windmill.dev/api/openapi.json — documented REST API, 716 paths."
- Openapi spec: pass — "OpenAPI HTML links /api/openapi.json; fresh valid OpenAPI 3.0.3 fetched, POINTER and structured evidence retained. Root app spec probes are SPA shells, not the spec."
- MCP server: pass — "https://www.windmill.dev/docs/core_concepts/mcp.md — genuine documented Model Context Protocol endpoints; well-known 404 does not negate this."
- SDK packages: pass — "Official Python, TypeScript/Deno/Bun, Rust, Go and PowerShell clients; repository and Rust client docs retained."
- Auth docs: pass — "https://www.windmill.dev/docs/core_concepts/user_tokens.md — bearer authentication and scoped token issuance documented."
- Agent self serve creds: pass — "OpenAPI documents /auth/login returning a token and /users/tokens/create programmatic scoped token generation; initial account bootstrap still required; issuance not behaviorally tested."
- Webhooks: partial — "https://www.windmill.dev/docs/core_concepts/webhooks.md — extensive bearer-token webhook docs retained, but request signing not established."
- CLI tool: pass — "https://www.windmill.dev/docs/advanced/local_development — official wmill CLI and sync push deployment."
- Error model: fail — "Fresh OpenAPI has no named Error schema or established JSON error contract; error_handling.md documents job/flow errors, not API JSON error model."
- Rate limit docs: partial — "Cloud execution quotas documented on pricing; rate-limit response headers and complete API rate policy not found."
- Agent config: pass — "AI sessions document importable SKILL.md skills; local AI development guide provides CLAUDE.md instructions and MCP setup. Missing /agents.md/.well-known/agent is not absence of all configuration."

## Coding harnesses

- Claude Code (Anthropic) — "run AI coding agents (Claude Code, Codex, OpenCode) in Windmill with sandboxing and persistent file storage; local development optimized for AI (Claude Code, Cursor...)." [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox)
- Codex CLI (OpenAI) — "run AI coding agents (Claude Code, Codex, OpenCode)... build locally with Claude Code or Codex, deploy with `wmill sync push`." [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox)
- Cursor (Anysphere) — "local development experience optimized for AI (Claude Code, Cursor...); use the MCP to trigger scripts and flows from Claude, Cursor or any MCP client." [source](https://www.windmill.dev/docs/misc/guides/local_dev_with_ai)
- OpenCode (opencode) — "run AI coding agents (Claude Code, Codex, OpenCode)." [source](https://www.windmill.dev/docs/core_concepts/ai_sandbox)

## Compliance & regions

- SOC 2 Type II: certified (scope: hosted) — "SOC 2 Type 2 — Compliant; Windmill SOC 2 Type II Attestation 2025" [source](https://trust.windmill.dev/)
- HIPAA: self-attested (scope: hosted) — "HIPAA — Compliant" [source](https://trust.windmill.dev/)
- Regions note: No actual Cloud regions found; do not infer from office locations.

## Open source

- Repository: https://github.com/windmill-labs/windmill
- License: AGPL-3.0
- Stars: 18186
- Forks: 1117
- Self-host methods: docker, compose, kubernetes, helm
- Self-host dependencies: postgres, object-storage

## Company & presence

- Privacy policy: https://www.windmill.dev/privacy_policy
- Terms of service: https://www.windmill.dev/terms_of_service
- GitHub: https://github.com/windmill-labs/windmill
- Hub: https://hub.windmill.dev/
- Cloud app: https://app.windmill.dev/
- Blog: https://www.windmill.dev/blog
- X / Twitter: https://twitter.com/windmill_dev
- Discord: https://discord.com/invite/V7PM2YHsPB

## Nearby in the atlas

- [Claude Managed Agents](/products/claude-managed-agents.md)
- [n8n](/products/n8n.md)
- [Trigger.dev](/products/trigger-dev.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)
- [Aptible](/products/aptible.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.