No more typing reviews! Try our Samantha, our new voice AI agent.

JFrog Artifactory vs Sonatype Repository Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

JFrog Artifactory
Ranking in AI Software Development
13th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
14
Ranking in other categories
Repository Managers (1st)
Sonatype Repository Firewall
Ranking in AI Software Development
23rd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
4
Ranking in other categories
Application Security Tools (25th), Software Composition Analysis (SCA) (14th)
 

Mindshare comparison

As of April 2026, in the AI Software Development category, the mindshare of JFrog Artifactory is 0.5%. The mindshare of Sonatype Repository Firewall is 0.5%, down from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI Software Development Mindshare Distribution
ProductMindshare (%)
JFrog Artifactory0.5%
Sonatype Repository Firewall0.5%
Other99.0%
AI Software Development
 

Featured Reviews

reviewer2787339 - PeerSpot reviewer
Vice President at a financial services firm with 10,001+ employees
Integrated pipelines have improved enterprise deployments and now automate secure dependency flows
Regarding improvements for JFrog Artifactory, I remember that the documentation was more focused on the on-premises JFrog version. I was mostly redirected toward that, so I found a lack of specific or clear documentation on using JFrog Artifactory with AWS. I felt this gap two years ago, and there were capabilities such as X-ray or integrations with other AWS features that I found lacking at the time. I do not have much more to say about the needed improvements in integration or documentation, but I want to mention that, coming from a quality background, I think built-in quality gates for intelligent automation, vulnerability checks, or improved visibility and communication during slow responses or service downtime would be useful for visibility in distributed environments. Looking back, I think the learning curve for JFrog Artifactory could be eased, and the installation process could feel less overwhelming. While it is not that difficult, I have seen new joiners struggle with the initial setup. I think JFrog Artifactory could improve with some UX revamps since many tools these days provide very intuitive user experiences, and I believe that could be something to look into for the future.
JK
CEO at VIVANS
Accurate database support blocks malicious code with excellent support
Many companies, including ours, use Nexus Repository due to concerns about malware and critical vulnerabilities. There should be a specific method to prevent malicious packages from entering the internal network, so our company uses Nexus Repository. We usually consider adding the firewall feature…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"For the most part, it's pretty stable."
"HPE was using it for a lot of things, and they certainly had a massive implementation."
"As for specific outcomes about the positive impact from expanding to four or five verticals, we have achieved faster deployment speeds, faster time to market, and lower pipeline failure rates."
"HPE was using it for a lot of things, and they certainly had a massive implementation."
"The most valuable feature I have found is the JFrog CLI."
"Universal package support and custom properties help my team day-to-day by making us more efficient, as we have one tool with which all engineering teams can interact regardless of their team."
"The core functionality is most valuable for indexing and metadata of all the artifacts, but within the last year or two, we've been using the Projects feature, which has been very helpful. We can now assign individual admins for different projects and repos so that they can self-manage their own user permissions for their data. My IT DevOps team doesn't have to be the facilitators of that. It's now more of a self-service capability for them."
"The most valuable feature is that it is a centralized repository and that you can open multiple repositories for different types of artifacts."
"The customer service is fantastic."
"The firewall is the only solution that supports Nexus Repository."
"You will get clean code every time, and that's a great achievement."
"The product's network and intrusion protection features are valuable. It also has rules and compliance features for security."
"Another thing that I like about Sonatype is that if you download something today, and five days from today it becomes vulnerable, it will notify you."
"Nexus Firewall has also significantly improved the time it takes us to release secure apps to market."
 

Cons

"In some of the latest versions of JFrog's SaaS solution, they changed the user interface, the SSO settings, how you interact with them over API, and how you generate tokens. It was very confusing for me. The overall user management is very complicated."
"The latest version that I am using is 7.41. It has been upgraded graphics-wise, but there is a bit of slowness. They can improve the graphical interface for the admin jobs and make it faster."
"We're looking for something that has additional reporting capabilities on data growth and data aging. This goes back to storage lifecycle management so that the actual Artifactory itself can provide these reports to either the administrators or the users. I don't know if it has those capabilities. That's something we have to look into regarding the self-service dashboard, but the tool itself having those capabilities would be great rather than trying to do it at the underlying storage hardware layer."
"The documentation is a bit sparse. That's our only complaint."
"Although JQL is a great tool, I have noticed that JQL queries can be hard to learn."
"Sometimes the documentation was sort of messy because there are many possibilities for where and how to install Artifactory."
"It's an enterprise product that acts like an enterprise product. In other words, it's not a product where they focus on user experience. I wasn't an administrator, so I primarily worked with the command line tool to upload and download parts of the product. I was not impressed with that because it wasn't well documented. It was challenging to figure out how to get things to work."
"Looking back, I think the learning curve for JFrog Artifactory could be eased, and the installation process could feel less overwhelming."
"There are several features lacking in the current offering, particularly concerning container support and AI packages, like humming phase support."
"There are several features lacking in the current offering, particularly concerning container support and AI packages."
"I think we posted one or two queries on the development side, but the response was not that great."
"What I don't like is the lack of an option to pick up the phone and call someone for support. That is something they need to improve on. They need to have a professional services package, or they need to include that option with their services."
"The tool needs to improve its file systems. The product should also include zero test feature."
"What I don't like is the lack of an option to pick up the phone and call someone for support."
 

Pricing and Cost Advice

"I am not aware of its cost, but it is worth investing in this. My guess is that its price is not much because we generally prefer open-source solutions, and if we are investing, we don't go for expensive ones. Our selection is based on the market demand and needs, and we invest only if something is worth the cost."
"It is a bit expensive. It could be a little bit lower or have an a la carte option because, in our case, we had to go to the next version of Enterprise X because we needed one feature, which was more than three projects. We don't need all the other capabilities, but we're paying for all those. It's almost twice the cost of the previous version. So, it would be nice to have something along those lines."
"The pricing is reasonable if you're a large enterprise developing code. It's not super-expensive."
report
Use our free recommendation engine to learn which AI Software Development solutions are best for your needs.
885,837 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
13%
Manufacturing Company
10%
Comms Service Provider
7%
Financial Services Firm
19%
Construction Company
9%
Insurance Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise11
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for JFrog Artifactory?
The pricing is very competitive and fits well within our budget.
What needs improvement with JFrog Artifactory?
My advice to others looking into using JFrog Artifactory would be to improve build consistency, manage artifact governance, and centralize and streamline deployment flows for better tracking of con...
What is your primary use case for JFrog Artifactory?
My main use case for JFrog Artifactory is that we have been using it to manage binaries, which makes it flexible for diverse development. One of the strongest aspects of JFrog Artifactory is its se...
What is your experience regarding pricing and costs for Sonatype Nexus Firewall?
Also, I consider it average. Some people might consider it expensive, however, since it supports many beautiful features, I would say it is worth it.
What is your primary use case for Sonatype Nexus Firewall?
Many companies, including ours, use Nexus Repository due to concerns about malware and critical vulnerabilities. There should be a specific method to prevent malicious packages from entering the in...
What advice do you have for others considering Sonatype Nexus Firewall?
I would give the solution eight out of ten. I would look at the comparison of Sonatype to some other firewalls. There is room for improvement, especially mentioning container support and AI packages.
 

Also Known As

No data available
Sonatype Nexus Firewall, Nexus Firewall
 

Overview

 

Sample Customers

Oracle, Cisco, Cars.com, Riot Games, Google, CA Technologies
EDF, Tomitribe, Crosskey, Blackboard, Travel audience
Find out what your peers are saying about JFrog Artifactory vs. Sonatype Repository Firewall and other solutions. Updated: February 2026.
885,837 professionals have used our research since 2012.