What it is
ComfyUI is a graph-based tool for running diffusion models. You build a workflow by connecting nodes (load model, encode prompt, sample, decode, save) and share the result as a file, and it also works as a headless backend with an HTTP API.
It supports image, video, audio and 3D models and runs on Windows, Linux and macOS with NVIDIA, AMD, Intel and Apple hardware. The maintainers say weight streaming lets even the largest open models run on as little as 4 GB of VRAM and 8 GB of RAM. Optional Partner Nodes call paid closed models such as Nano Banana and Seedance.
The project lives under Comfy-Org, which also sells Comfy Cloud. Stable releases come roughly every two weeks; v0.42.1 was published on 19 October 2026.
Our review
ComfyUI is where new open image and video models become usable, and its node graph is both the reason and the barrier. The repository has about 142,200 GitHub stars, model releases often arrive with an official ComfyUI workflow, and a saved graph reproduces a pipeline exactly, from ControlNet conditioning to upscaling and video interpolation.
The project has grown into a business without closing the core. Comfy-Org ships a desktop app, a Windows portable build and Comfy Cloud, which runs workflows on 96 GB RTX 6000 Pro Blackwell GPUs from $20 a month ($16 billed yearly). Partner Nodes bring closed models into the same graph, paid from the same credits, and a single --offline flag switches them off, which matters to studios that cannot let prompts leave the building.
Security is the real weakness. ComfyUI has no login: the server listens on 127.0.0.1:8188 by default, but adding --listen exposes an unauthenticated API to the network. In July 2026 four high-severity advisories covered stored cross-site scripting through uploads and path traversal that could read images from elsewhere on disk. Third-party custom nodes are arbitrary Python, and ComfyUI's own January 2025 security update names two incidents, ComfyUI_LLMVISION, a 2024 node that stole browser passwords, and a compromised ultralytics package, so installing the nodes a popular shared workflow asks for is the biggest risk most users take.
The GPL-3.0 licence rarely bothers artists, since it covers the code rather than the images it produces, but it constrains companies that want to embed a modified ComfyUI in a closed product. InvokeAI offers a gentler canvas for editing and diffusers suits Python developers who prefer code to graphs; neither keeps pace with ComfyUI's model support.
Where it earns its place
A freelance motion designer with a single consumer NVIDIA GPU
Generate short product videos with open video models
Load the official Wan 2.2 template, swap in client images and queue variations overnight; local runs cost only electricity. When the GPU is busy, Comfy Cloud's Standard plan ($192 a year) includes 50,400 credits, which Comfy reckons is about 4,560 five-second clips.
A backend engineer at an online retailer
Generate product imagery automatically from a catalogue feed
Export a workflow in API format and POST it to /prompt on a headless ComfyUI instance, or use Comfy Cloud's API, which allows 1 to 25 concurrent workflows depending on plan. Keep any self-hosted server on a private network, since it has no authentication of its own.
A creative director at a 20-person agency
Give staff shared image and video generation without buying workstations
Comfy Cloud team tiers run from $200 to $2,500 a month; the $700 tier ($630 billed yearly) covers up to 50 members with a shared credit pool and role-based permissions. The alternative is buying and maintaining local GPUs, plus vetting every custom node staff install.
Before you commit
- Setup
- The desktop app is the recommended route; a Windows portable build (Python 3.13, PyTorch CUDA 13.0), comfy-cli (pip install comfy-cli) and manual installs cover the rest. The first image waits mainly on downloading a model checkpoint.
- Integrations
- HTTP and WebSocket API for headless use, ComfyUI-Manager (enabled with --enable-manager) for custom nodes, and Partner Nodes for paid models including Nano Banana and Seedance, with bring-your-own-key for Runway and Gemini.
- Data and privacy
- Core runs offline and downloads nothing unless asked; Partner Nodes send prompts to third-party APIs, and --offline disables them. There is no authentication and the server binds to 127.0.0.1:8188 unless --listen is set. Four high-severity advisories in July 2026 covered XSS and path traversal (the SVG flaw was fixed in v0.28.0).
- Cost at scale
- Local use costs only hardware. Comfy Cloud runs $20 to $100 a month per user from Standard to Pro (up to 20% off yearly), team tiers run $200 to $2,500 a month, and its API GPUs cost $3.49 an hour for an RTX PRO 6000 up to $11.23 for a B200, billed per second.
- Limits
- About 5,300 open issues and pull requests. Commits between stable tags can break custom nodes, Python 3.14 works but some nodes fail, and Cloud jobs are cancelled after 30 minutes on Standard or an hour on Pro.
What's good
- Day-one workflows for many new open models
- Shareable, reproducible node workflows
- Runs large models on modest VRAM through weight streaming
- Paid Partner Nodes are optional and switch off with --offline
What's not
- Steep learning curve for beginners
- No built-in authentication; risky if exposed with --listen
- Third-party custom nodes run arbitrary code
- GPL-3.0 limits closed-source embedding
Best for
Artists and developers who want full control over local image and video generation.
Alternatives
ComfyUI: common questions
- Is ComfyUI worth it?
- New open image and video models land here first; the node graph and an unauthenticated server are the price of admission. We rate it 4.7 out of 5.
- How much does ComfyUI cost?
- Free and open source under the GPL-3.0 licence. Comfy Cloud runs from $20 a month ($16 billed yearly); Partner Nodes are paid per use.
- What are the downsides of ComfyUI?
- Steep learning curve for beginners; no built-in authentication; risky if exposed with --listen; third-party custom nodes run arbitrary code; gPL-3.0 limits closed-source embedding.
- Who is ComfyUI best for?
- Artists and developers who want full control over local image and video generation.
- How much does ComfyUI cost for a team or in production?
- Local use costs only hardware. Comfy Cloud runs $20 to $100 a month per user from Standard to Pro (up to 20% off yearly), team tiers run $200 to $2,500 a month, and its API GPUs cost $3.49 an hour for an RTX PRO 6000 up to $11.23 for a B200, billed per second.
- Is ComfyUI safe for company data?
- Core runs offline and downloads nothing unless asked; Partner Nodes send prompts to third-party APIs, and --offline disables them. There is no authentication and the server binds to 127.0.0.1:8188 unless --listen is set. Four high-severity advisories in July 2026 covered XSS and path traversal (the SVG flaw was fixed in v0.28.0).
- What are the best ComfyUI alternatives?
- The closest alternatives we have reviewed are InvokeAI, Hugging Face Diffusers and AI Toolkit.
Answers checked Oct 23, 2026.