No more typing reviews! Try our Samantha, our new voice AI agent.

FlexNet Code Insight vs JFrog Xray comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

FlexNet Code Insight
Ranking in Software Composition Analysis (SCA)
21st
Average Rating
4.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
JFrog Xray
Ranking in Software Composition Analysis (SCA)
7th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Vulnerability Management (48th), Container Security (18th), Software Supply Chain Security (3rd)
 

Mindshare comparison

As of September 2026, in the Software Composition Analysis (SCA) category, the mindshare of FlexNet Code Insight is 1.3%, up from 0.8% compared to the previous year. The mindshare of JFrog Xray is 5.2%, down from 9.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Composition Analysis (SCA) Mindshare Distribution
ProductMindshare (%)
JFrog Xray5.2%
FlexNet Code Insight1.3%
Other93.5%
Software Composition Analysis (SCA)
 

Featured Reviews

A decent web interface for reports, but the snippet style code matching requires too much effort
Due to the "snippet match" nature of the scans, we found that it was too much effort to properly validate and catalog each open source component with every new project/product. Incremental results were also difficult to achieve even after consulting with the vendor. We found there were too many false positives and the code-snippet validator had bugs and presented too many false positives. My experience with this tool has turned me away from "snippet"-focused composition analysis. We have switched to one that uses more complete code signatures that do not require validation and review of findings in most cases.
reviewer2757060 - PeerSpot reviewer
DevSecOps Engineer at a tech services company with 501-1,000 employees
Has supported compliance and threat detection but suffers from poor user experience and CI integration
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is a bit of a sensitive topic because somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI. Apart from this integration aspect, JFrog Xray does the job, but the user experience is not very good. The documentation is really poor. It's not the design; it's not user-friendly at all. You can't find the items in the menus. I think the UI needs improvement. It's not user-friendly, but it works very effectively. Regarding the metrics and dashboards in JFrog Xray, the dashboard is fine, but it's about how you share that dashboard—you need extra permission. You can say each project can have its own dashboard and is responsible for the mistakes or the level of security they want, or you can have a person dedicated to security. At the moment, it's more a permission issue—how you set the permission properly, how do you give access to the dashboard or delegate. This needs improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It had a web interface into the reporting tools that was decent, and open source components could be reported per project and/or aggregated similar to other software composition tools."
"With JFrog, we can use this registry from any cloud or work locally as well, and it can support multiple packages such as NuGet, pip, and other technologies including Terraform, making credential management very easy."
"I would say the reporting functionalities are pretty good as are the policy watches."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"The solution is stable and reliable."
"Good reporting functionalities."
"I am utilizing the deep scanning capabilities in JFrog Xray product, and this feature is very handy because with other software, you don't know where the bad dependencies come from."
 

Cons

"I found the user interface cumbersome and difficult to use."
"My experience with this tool has turned me away from "snippet"-focused composition analysis."
"I'd like to see deeper reporting, they're pretty basic and there are no categories for comparing things."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"Apart from this integration aspect, JFrog Xray does the job, but the user experience is not very good."
"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"JFrog Xray does not have a dashboard."
"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."
"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."
report
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
913,349 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
25%
Manufacturing Company
11%
Computer Software Company
6%
University
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What is your experience regarding pricing and costs for JFrog Xray?
It is affordable because JFrog Xray provides a free trial of 14 days. We can explore all the features of JFrog in the free trial. The pricing is reasonable because we can manage all the images in a...
 

Comparisons

 

Also Known As

No data available
JFrog Security Essentials
 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about Snyk, Veracode, Black Duck and others in Software Composition Analysis (SCA). Updated: September 2026.
913,349 professionals have used our research since 2012.