If your business runs on automations, October 2026 was a month to pay attention. Zapier folded its standalone Agents product into a step inside the Zap editor. n8n published a batch of security advisories that every self-hosted instance needs to act on. Make added version control and fallback connections for its AI agents. And Pipedream announced that its Workflows product is shutting down. If you are choosing an automation platform, or wondering whether it is time to move some workflows into custom code, the decision looks different today than it did six months ago.
This guide is written for founders, operations leads and agency owners, not for automation hobbyists. It explains what actually changed, how n8n, Zapier and Make differ in ways that matter to a business, when a custom-built automation is the better investment, and a simple way to decide.
What changed in October 2026
- Zapier Agents became AI by Zapier. On October 6, Zapier announced that agent capabilities (tool calling, reasoning and autonomous action) now live inside a single AI step in a Zap. Agent runs show up in Zap History, are billed in tasks like everything else, and you can now require approval per tool and choose a model tier per step. Zapier's migration guide says it has not yet set a date to turn off the old Agents product and will email affected users first.
- n8n shipped a large security update. n8n's October 14 security update listed fifteen advisories, five of them rated high, including cross-project Data Table access, stored cross-site scripting in webhook responses and credential secrets exposed in error data. Fixes landed in 2.43.5 (stable), 2.44.1 (beta) and 1.123.85 (v1). n8n Cloud is patched automatically; self-hosted instances are not.
- Make tightened its agent tooling. Make's release notes show scenario version control (October 7), signed event subscriptions for platform notifications (October 8), and fallback connections plus prompt caching for Make AI Agents (October 9).
- Pipedream Workflows is closing. Pipedream says Workflows and String shut down on March 31, 2027, and Workflows data, including connected-account credentials and OAuth tokens, will be deleted by April 30, 2027. Pipedream Connect is not affected.
The pattern is clear: every platform is turning into an AI agent platform, and each one is making different trade-offs about control, hosting and billing. That is exactly why the "which tool" question deserves a fresh look.
The real differences between n8n, Zapier and Make
Feature lists change every week. These are the differences that tend to hold up when you are running automations that touch money, customers or compliance.
Zapier: fastest to start, priced per task
Zapier's strength is breadth and ease of use. It connects to thousands of apps, non-technical staff can build a Zap in an afternoon, and the new AI step means an agent lives right next to your filters, paths and run history. The trade-off is that you pay per task, and AI steps now consume tasks too, so a busy, multi-step workflow can get expensive as volume grows. Your data and logic also live entirely on Zapier's cloud.
Good fit: small teams, sales and marketing workflows, and businesses that value speed over control.
Make: visual, flexible, good for complex branching
Make sits in the middle. Its visual scenario builder handles branching, iteration and data transformation better than most no-code tools, and October's additions (version control, signed event subscriptions and agent fallback connections) are the kind of operational features that matter once automations are in production. Like Zapier, it is cloud-hosted and usage-billed.
Good fit: operations teams that need more complex logic than Zapier comfortably supports, without writing code.
n8n: most control, can be self-hosted
n8n can run on n8n's cloud or on your own server. Self-hosting gives you control over where data lives, lets you run custom code nodes, and keeps costs predictable at high volume. That is why many technical teams and agencies prefer it. The October advisories show the other side of that bargain: if you self-host, patching is your job. An unpatched instance holding API keys for your CRM, email and payment tools is a real risk.
Good fit: teams with technical staff (or a partner) who need data control, custom code or high volumes.
When custom automation beats all three
Automation platforms are excellent glue. They are a weaker choice when the automation is the product, or when it carries enough risk that you need full control. In our experience, custom code tends to make more sense when:
- Volume makes usage billing painful. Thousands of runs a day with many steps each can cost more on a per-task platform than a small service on your own infrastructure.
- The logic is core to your business. Pricing engines, order routing, onboarding flows and anything customers see directly deserve version control, tests and code review.
- You have compliance or data-residency requirements. Healthcare, finance and enterprise clients often need to know exactly where data goes and who can access it.
- You need deep integration with your own systems. If the workflow mostly talks to your own database, CRM or ERP, a direct integration is usually simpler and more reliable than routing through a third party.
- You are building for your own customers. If you run a SaaS product and want to offer integrations to your users, that is product engineering, not a workflow tool. (Pipedream's decision to keep Connect, its embedded-integrations product, while closing Workflows reflects the same split.)
Custom is not automatically better. It costs more up front, and someone has to maintain it. The honest answer for most growing businesses is a hybrid: keep simple, low-risk workflows on a platform, and move the handful of critical, high-volume or customer-facing ones into code.
A simple way to decide
- List your automations and rank them by impact. What breaks, and who notices, if each one stops for a day?
- Estimate volume honestly. Count runs and steps per month, including the AI steps that now count toward usage on Zapier and Make.
- Decide who owns maintenance. If nobody on your team will patch a server, either use a managed cloud plan or have a partner own it under a maintenance agreement.
- Match each workflow to the simplest tool that is safe enough. Low-risk and low-volume: Zapier or Make. Needs data control or code: n8n. Core, regulated or customer-facing: custom.
- Review every six months. As this month shows, platforms change pricing, products and even whether they exist.
If you run AI agents inside your automations
All three platforms now let an AI model call tools: send emails, update records, create invoices. That is powerful, and it is where most of the new risk sits. A few rules we apply on client projects:
- Require human approval for actions that spend money, send external messages or delete data. Zapier now supports approval per tool; use it.
- Give agents the narrowest credentials possible. A read-only CRM key for a reporting agent, not an admin token.
- Set fallbacks and limits. Make's fallback connections help when a model provider has an outage. Cap runs and usage so a loop cannot burn through your budget overnight.
- Log everything. You should be able to answer "why did the agent do that?" from the run history.
For a deeper look at where agents genuinely help, see our guide to AI agents for small business, and if you want AI assistants to use your own systems safely, our post on MCP servers for business.
Action checklist for this month
- Self-hosting n8n? Check your version today and upgrade to at least 2.43.5 on stable (or the patched version for your branch). Back up your database and encryption key first.
- Using Zapier Agents? Review the migration banner in your agent list, test the converted Zap, and turn on approval for sensitive tools before publishing.
- Running Make AI Agents in production? Configure a fallback connection and save a named version before each change.
- On Pipedream Workflows? Export your workflows now and plan the move well before March 31, 2027. Exports cover workflow structure, so plan to reconnect accounts and secrets on the new platform.
What this costs
Platform subscriptions are published by each vendor and change often, so check their pricing pages against your real volume. For custom work, our automation and integration projects generally fall within the USD 3k–15k+ range we quote across our services, depending on how many systems are involved, how much AI logic is needed and what level of monitoring and support you want afterwards. Smaller jobs, such as auditing and hardening an existing n8n instance or migrating a set of Pipedream workflows, are scoped individually.
How Localhost Labs can help
We are a software studio in Multan, Pakistan, working with local businesses, US and UK companies, and agencies that need a white-label engineering partner. On automation projects we typically audit what you already run, keep what works on your current platform, and rebuild the critical pieces as reliable, tested code where it pays off.
Explore our automation tools and API integrations services, add AI with our AI solutions team, or connect workflows to your CRM or ERP. For patching and monitoring self-hosted tools, see maintenance and support. Agencies can also work with us through white-label development. Tell us about your workflows and we will suggest the simplest setup that is safe enough for your business.