JFrog DevOps Cloud Platform vs Snyk comparison

JFrog DevOps Cloud Platform

Read 47 Snyk reviews

1,976 Views
2 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 4, 2025

Snyk and JFrog DevOps Cloud Platform are competing products in the DevOps space, targeting different strengths. JFrog DevOps Cloud Platform holds a competitive edge due to its comprehensive feature offerings that many find worth the investment.

Features: Snyk provides robust security analysis, highlights vulnerabilities, and facilitates quick remediation. It integrates seamlessly with various CI/CD tools, offering ease of use and efficiency in security management. Additionally, its user-friendly interface appeals to teams looking for straightforward solutions. JFrog DevOps Cloud Platform offers end-to-end DevOps functionality, including artifact management, automation capabilities, and version control, making it a powerful choice for integrated DevOps processes.

Ease of Deployment and Customer Service: Snyk stands out for its straightforward deployment experience and responsive customer support, enabling organizations to swiftly implement its solutions. On the other hand, JFrog DevOps Cloud Platform, with its comprehensive suite of tools, requires a more hands-on approach. Nevertheless, it offers extensive documentation and solid customer service, appealing to technical users in need of a fully integrated DevOps environment.

Pricing and ROI: Snyk is known for its cost-effective pricing model, promising a strong ROI through its efficient threat detection and resolution capabilities. JFrog DevOps Cloud Platform, though requiring a higher initial investment, provides long-term benefits through its full spectrum of integrated features, delivering substantial ROI for users who fully utilize its comprehensive DevOps tools.

To learn more, read our detailed JFrog DevOps Cloud Platform vs. Snyk Report (Updated: June 2025).

JFrog DevOps Cloud Platform vs. Snyk

June 2025

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

JFrog DevOps Cloud Platform

Ranking in DevSecOps

12th

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Software Supply Chain Security (16th), AWS Marketplace (36th)

Snyk

Ranking in DevSecOps

2nd

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Static Application Security Testing (SAST) (7th), Cloud Management (16th), Container Security (5th), Software Composition Analysis (SCA) (2nd), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of June 2025, in the DevSecOps category, the mindshare of JFrog DevOps Cloud Platform is 0.6%. The mindshare of Snyk is 26.0%, down from 29.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps

Featured Reviews

Fredierick Saladas

DevOps Lead at Standard Chartered Bank

Provides superior integration options and comprehensive reporting features

The product could benefit from enhanced integration capabilities with older software systems and more customizable reporting options. Improved support for mobile devices would also be advantageous, allowing team members to access the system more effectively while on the go. In the next release, we would like to see advanced analytics features, including predictive analytics to help forecast project outcomes. Additionally, a more robust mobile app with offline capabilities would be valuable for remote work scenarios.

Read full review

meetharoon

CEO at a computer software company with 10,001+ employees

Affordable tool boosts code scanning efficiency but faces integration hurdles

The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I appreciate the features in JFrog DevOps Cloud Platform, especially the efficient file management where downloads and uploads are optimized, saving time. The storage efficiency is also great as it avoids redundancy, which is crucial for our team. It is also quite easy to use, especially for basic commands through the command line. It's straightforward for us internally, and our data is well-hosted on their servers, which makes data location and querying fast and efficient. Moving our storage to JFrog has streamlined our development cycle by eliminating duplicated data, which previously took up extra space locally. This efficiency is crucial for our workflow, although network speeds still play a significant role in performance."

"They have a professional service team that works alongside their engineering and performance teams."

"The most valuable features include task tracking and reporting capabilities."

"The most valuable features include enriched information around the vulnerabilities for better triaging, in terms of the vulnerability layer origin and vulnerability tree."

"Snyk categorizes the level of vulnerability into high, medium, and low, which helps organizations prioritize which issues to tackle first."

"It has a nice dashboard where I can see all the vulnerabilities and risks that they provided. I can also see the category of any risk, such as medium, high, and low. They provide the input priority-wise. The team can target the highest one first, and then they can go to medium and low ones."

"I think all the standard features are quite useful when it comes to software component scanning, but I also like the new features they're coming out with, such as container scanning, secrets scanning, and static analysis with SAST."

"Our overall security has improved. We are running fewer severities and vulnerabilities in our packages. We fixed a lot of the vulnerabilities that we didn't know were there."

"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."

"We use Snyk to check vulnerabilities and rectify potential leaks in GitHub."

"The most valuable feature is that they add a lot of their own information to the vulnerabilities. They describe vulnerabilities and suggest their own mitigations or version upgrades. The information was the winning factor when we compared Snyk to others. This is what gave it more impact."

More Snyk pros

Cons

"Our locations are in different environments, so the remote server takes time to catch up, causing replication delays. The engineering team suggested that this issue would be resolved, but I'm not sure if it has been addressed yet. This is more of a feature enhancement that we suggested."

"We have encountered stability issues lately, particularly with frequent 500 internal server errors. Despite efforts from our DevOps team to adjust settings, these issues persist, affecting our workflow, especially with machine learning data uploads. Overall, while it's beneficial for storage and accessibility, stability issues need improvement for seamless operations. The occasional occurrence of internal server errors takes several minutes to resolve on their own and can disrupt workflows. Another concern is that sometimes files appear to be successfully uploaded, but then they cannot be downloaded, with no error message indicating the issue during the upload process. This inconsistency needs to be addressed by JFrog to ensure reliable functionality for users like us."

"The product could benefit from enhanced integration capabilities with older software systems and more customizable reporting options."

"We would like to have upfront knowledge on how easy it should be to just pull in an upgraded dependency, e.g., even introduce full automation for dependencies supposed to have no impact on the business side of things. Therefore, we would like some output when you get the report with the dependencies. We want to get additional information on the expected impact of the business code that is using the dependency with the newer version. This probably won't be easy to add, but it would be helpful."

"Because Snyk has so many integrations and so many things it can do, it's hard to really understand all of them and to get that information to each team that needs it... If there were more self-service, perhaps tutorials or overviews for new teams or developers, so that they could click through and see things themselves, that would help."

"The solution's integration with JFrog Artifactory could be improved."

"One area where Snyk could improve is in providing developers with the line where the error occurs."

"It lists projects. So, if you have a number of microservices in an enterprise, then you could have pages of findings. Developers will then spend zero time going through the pages of reports to figure out, "Is there something I need to fix?" While it may make sense to list all the projects and issues in these very long lists for completeness, Snyk could do a better job of bubbling up and grouping items, e.g., a higher level dashboard that draws attention to things that are new, the highest priority things, or things trending in the wrong direction. That would make it a lot easier. They don't quite have that yet in container security."

"There are a lot of false positives that need to be identified and separated."

"A feature we would like to see is the ability to archive and store historical data, without actually deleting it. It's a problem because it throws my numbers off. When I'm looking at the dashboard's current vulnerabilities, it's not accurate."

"We use Bamboo for CI.CD, and we had problems integrating Snyk with it. Ultimately, we got the two solutions to work together, but it was difficult."

More Snyk cons

Pricing and Cost Advice

"Regarding pricing, I focus on the platform's interface and user communication rather than costs."

"The product pricing is competitive but worth negotiating for volume discounts or longer-term contracts."

"Compared to Veracode, Snyk is definitely a cheaper tool."

"It is pretty expensive. It is not a cheap product."

"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."

"Pricing-wise, it is not expensive as compared to other tools. If you have a couple of licenses, you can scan a certain number of projects. It just needs to be attached to them."

"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."

"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."

"Snyk is an expensive solution."

"The price of the solution is expensive compared to other solutions."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

16%

Computer Software Company

14%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What needs improvement with JFrog DevOps Cloud Platform?

What advice do you have for others considering JFrog DevOps Cloud Platform?

Overall, the solution has been a great asset to our team. I advise investing time in the initial setup and training to leverage its capabilities fully. Ensure you clearly understand your needs and ...

What is your experience regarding pricing and costs for JFrog DevOps Cloud Platform?

The product pricing is competitive but worth negotiating for volume discounts or longer-term contracts. Licensing options are flexible, but ensure you understand the terms and any additional costs ...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What do you like most about Snyk?

The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

GitHub Advanced Security vs Snyk

Comparisons

No data available

Compared 11% of the time

SonarQube Server (formerly SonarQube) vs Snyk

Compared 8% of the time

Trivy vs Snyk

Compared 8% of the time

Wiz vs Snyk

Compared 8% of the time

Black Duck vs Snyk

Compared 6% of the time

More Snyk Competitors

Product Reports

Download JFrog DevOps Cloud Platform product report

AWS Marketplace

June 2025

Download Snyk product report

May 2025

Also Known As

No data available

Fugue

Overview

The JFrog DevOps Cloud Platform optimizes software development life cycles through robust artifact management, CI/CD automation, and strong version control. Notable for its security features, it supports seamless software version maintenance and vulnerability scanning. Praised for enhancing organizational efficiency, it ensures faster, secure deliveries, improving collaboration within teams.

JFrog

Snyk's AI Trust Platform empowers developers to innovate securely in AI-driven environments, ensuring rapid and secure software development with enhanced policy governance.

Snyk’s platform integrates AI-ready engines across the software development lifecycle, offering broad coverage with high speed and accuracy essential for fast-paced coding environments. AI-driven features include visibility, prioritization, and tailored security policies that enable proactive threat prevention and quick remediation. By focusing on LLM engineering and AI code analysis, Snyk supports secure and productive development processes. The platform's partnerships, including GenAI code assistants, enhance AI application security by addressing new threats and code velocity challenges.

What are the key features of Snyk?

Easy Integration: Snyk integrates with CI/CD pipelines, GitHub, and JIRA for seamless security management.
Multilingual Support: It offers extensive programming language support, enhancing project compatibility.
Actionable Insights: Provides accurate vulnerability detection with actionable remediation guidance.
Cloud and Container Security: Offers comprehensive checks for cloud and container environments, improving security posture.
Automation & Notifications: Automates vulnerability alerts and notifications for early threat identification in development.

What benefits should users consider in reviews?

Time Efficiency: Speeds up development by identifying and fixing vulnerabilities early in the software lifecycle.
Risk Reduction: Minimizes security risks with extensive vulnerability scanning and proactive alerting.
Productivity Boost: Enhances productivity by integrating security directly into developers' workflows.
Improved Compliance: Aids in maintaining license compliance and managing open-source dependencies effectively.

Snyk is implemented across industries focusing on agile development and DevSecOps, enhancing software delivery speed and security. It is widely used for continuous monitoring and adherence to security and licensing standards, especially in environments relying on Docker image security and CI/CD pipeline integration.

Sample Customers

Information Not Available

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief