We performed a comparison between GitLab and JFrog Xray based on real PeerSpot user reviews.
Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable features of Gitlab are integration with CIE and the ability to rapidly deploy solutions, projects, and applications. It is very easy to use, and there are no complaints."
"GitLab is a solution for source code management, container registry, pipelines, testing, and deployment."
"The tool helps to integrate CI/CD pipeline deployments. It is very easy to learn. Its security model is good."
"CI/CD is valuable for me."
"CI/CD and GitLab scanning are the most valuable features."
"I have found the most valuable feature is security control. I also like the branching and cloning software."
"Of all available products, it was the easiest to use and easy to install."
"The most valuable feature of GitLab is the ability to upload scripts and make changes when needed and then reupload them. Additionally, the solution is user-friendly."
"The solution is stable and reliable."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"Good reporting functionalities."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"We would like to generate document pages from the sources."
"GitLab doesn't have AWS integration. It would be better to have integration with other container management environments beyond Kubernetes. It has very good integration with Kubernetes, but it doesn't have good integration with, for example, AWS, ETS, etc."
"GitLab would be improved with the addition of templates for deployment on local PCs."
"The tool should include a feature that helps to edit the code directly."
"I would like to see security increased in the future. A secure environment is very important."
"I used Spring Cloud config and to connect that to GitLab was so hard."
"Perhaps the integration could be better."
"We do face issues in our company when we run out of disk space."
"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"JFrog Xray's documentation and error logging could be improved."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"Lacks deeper reporting, the ability to compare things."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"JFrog Xray does not have a dashboard."
GitLab is ranked 6th in Software Composition Analysis (SCA) with 70 reviews while JFrog Xray is ranked 7th in Software Composition Analysis (SCA) with 7 reviews. GitLab is rated 8.6, while JFrog Xray is rated 8.2. The top reviewer of GitLab writes "Powerful, mature, and easy to set up and manage". On the other hand, the top reviewer of JFrog Xray writes "An intelligent solution that prioritizes which vulnerability to target first in your project". GitLab is most compared with Microsoft Azure DevOps, Bamboo, AWS CodePipeline, SonarQube and Tekton, whereas JFrog Xray is most compared with Black Duck, Snyk, Mend.io, Veracode and Amazon Inspector. See our GitLab vs. JFrog Xray report.
See our list of best Software Composition Analysis (SCA) vendors.
We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.