Vapi
Build production voice agents — phone calls, conversations, structured outcomes. The dev-friendly voice agent backbone.
Delv Safety Grade: B
Score 68/100 · assessed 2026-04-18
Vapi is a commercial voice agent platform for production telephony. The maintainer is a funded startup (Vapi Inc.) with active development and paying customers, but lacks the track record of established infrastructure vendors. Permissions are moderately broad: outbound network calls to their API, webhook callbacks to your backend, potential access to caller data and phone numbers, and integration with external telephony networks. The closed-source nature and API-only access limit transparency—you cannot audit the voice processing pipeline or data handling. Supply chain risk is moderate: you depend entirely on their hosted service with no self-hosted option or package to pin. No known security incidents, but the lack of public repository, changelog, or detailed security documentation means you are trusting their operational security practices without independent verification. Suitable for non-sensitive use cases where convenience outweighs auditability.
Green flags
- Funded startup with active customer base and production deployments
- Purpose-built for telephony with narrow, well-defined use case
- Developer-friendly API design with webhook integration patterns
- No known security incidents or credential leaks to date
Red flags
- Closed source with no public repository or code audit trail
- API-only model creates single vendor dependency with no self-host option
- Handles sensitive caller data (voice, phone numbers) without public security docs
- No visible changelog or incident disclosure process
- Webhook callbacks require exposing internal endpoints to third-party service
Permissions requested
Pricing
Platforms
Review
Pay for Vapi if you are replacing phone trees, building voice-first support, or automating outbound calls at scale. Skip it if you need a general-purpose assistant or cannot justify per-minute costs on exploratory projects.
Good at
- Low-latency voice with natural interruption handling
- Strong developer experience: SDKs, webhooks, function calling
- Production-ready telephony (inbound, outbound, transfers)
- Structured data extraction from conversations
- Custom voice and interruption sensitivity controls
Watch out
- No free tier beyond trial, per-minute pricing adds up
- Struggles with heavy accents and noisy environments
- Complex workflows require state machine debugging
- Not a general assistant, strictly voice telephony
- Requires developer effort to wire backend logic
Use cases
- Outbound and inbound voice agents
- Phone-tree replacements
- Voice surveys
- Voice-first customer support