Try our new research platform with insights from 80,000+ expert users

Docker vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
56
Ranking in other categories
Development Platforms (1st), Container Management (5th)
JFrog Xray
Ranking in Software Supply Chain Security
1st
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
Vulnerability Management (25th), Container Security (22nd), Software Composition Analysis (SCA) (6th)
 

Mindshare comparison

As of May 2025, in the Software Supply Chain Security category, the mindshare of Docker is 1.4%, up from 1.2% compared to the previous year. The mindshare of JFrog Xray is 18.6%, up from 16.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security
 

Featured Reviews

Rikin Parekh - PeerSpot reviewer
Useful to create sandbox environments to run applications and makes it easy to test them
Overall, setting up the Docker environment is quite easy. Many methods exist, such as using Docker Compose and Docker networks to communicate between containers. The main challenge lies in designing the architecture and integrating different frameworks and microservices. I would rate the ease of setting up the tool at around nine out of ten. The time it takes to deploy depends on the scale of the system. For the early-stage startup I'm currently working with, it doesn't take much time. It's just me handling the deployment. In our early-stage startup, we have a couple of teams with around four to five backend APIs and two front-end services. Deploying these doesn't take much time. My focus is more on minimizing costs due to our lean startup structure.
Mokshi Pandita - PeerSpot reviewer
An intelligent solution that prioritizes which vulnerability to target first in your project
We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Docker offers a resilient system with minimal failure chances and optimized performance"
"Docker is easy to understand and follow. It provides good scalability to the application."
"Docker is convenient and easy to use."
"The current version is quite good with our application."
"Containerization is the most valuable feature. I can communicate to the Docker containers using other containers."
"The tool helps us in code versioning. I think it's pretty much easy to use and very straightforward. Even if someone is new to the tool, they can easily start using it with a little guidance or theoretical knowledge. Go through the tool and start using it without much struggle."
"The most valuable feature of Docker is automation. When I deploy the solution I am confident it will work anywhere. It is reliable and easy to use."
"The solution's customer service is good."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"Good reporting functionalities."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"The solution is stable and reliable."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
 

Cons

"Docker can improve the integration with Microsoft Windows. It does not support native installations."
"The documentation could be improved."
"I would like to see better management layers."
"Unfortunately, base images are not currently available."
"The solution could offer better documentation."
"The learning curve with Docker is huge and extensive"
"In terms of communication between services, perhaps the configuration within networks between containers could be improved."
"There are elements of stability that are problematic. One of the most recent upgrades created a major incident on our cloud, whereby the containers were not restarting automatically."
"JFrog Xray's documentation and error logging could be improved."
"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"JFrog Xray does not have a dashboard."
"Lacks deeper reporting, the ability to compare things."
"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."
"The speed of JFrog Xray should improve. Other solutions have better performance."
 

Pricing and Cost Advice

"I use the solution's open-source version."
"The pricing of the solution is fairly cheap."
"This is an open-source solution, so there are no licensing costs."
"Its convenience edition is free of cost."
"There is a license needed to use Docker."
"Pricing is based on the number of users."
"Docker is a free open-source solution. However, there is the Docker Enterprise which is a paid solution."
"It's an open-source solution, so it doesn't cost anything"
Information not available
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Insurance Company
11%
Financial Services Firm
10%
Government
9%
Financial Services Firm
26%
Computer Software Company
13%
Manufacturing Company
12%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Docker?
We are using Docker to host applications.
What needs improvement with Docker?
In terms of communication between services, perhaps the configuration within networks between containers could be improved.
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.
What is your primary use case for JFrog Xray?
Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...
 

Comparisons

 

Also Known As

No data available
JFrog Security Essentials
 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about Docker vs. JFrog Xray and other solutions. Updated: April 2025.
849,686 professionals have used our research since 2012.