JFrog DevOps Cloud Platform vs Snyk comparison

JFrog DevOps Cloud Platform

Read 48 Snyk reviews

20,249 Views
1,822 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 4, 2025

Snyk and JFrog DevOps Cloud Platform are competing products in the DevOps space, targeting different strengths. JFrog DevOps Cloud Platform holds a competitive edge due to its comprehensive feature offerings that many find worth the investment.

Features: Snyk provides robust security analysis, highlights vulnerabilities, and facilitates quick remediation. It integrates seamlessly with various CI/CD tools, offering ease of use and efficiency in security management. Additionally, its user-friendly interface appeals to teams looking for straightforward solutions. JFrog DevOps Cloud Platform offers end-to-end DevOps functionality, including artifact management, automation capabilities, and version control, making it a powerful choice for integrated DevOps processes.

Ease of Deployment and Customer Service: Snyk stands out for its straightforward deployment experience and responsive customer support, enabling organizations to swiftly implement its solutions. On the other hand, JFrog DevOps Cloud Platform, with its comprehensive suite of tools, requires a more hands-on approach. Nevertheless, it offers extensive documentation and solid customer service, appealing to technical users in need of a fully integrated DevOps environment.

Pricing and ROI: Snyk is known for its cost-effective pricing model, promising a strong ROI through its efficient threat detection and resolution capabilities. JFrog DevOps Cloud Platform, though requiring a higher initial investment, provides long-term benefits through its full spectrum of integrated features, delivering substantial ROI for users who fully utilize its comprehensive DevOps tools.

To learn more, read our detailed JFrog DevOps Cloud Platform vs. Snyk Report (Updated: July 2025).

JFrog DevOps Cloud Platform vs. Snyk

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

JFrog DevOps Cloud Platform

Ranking in DevSecOps

12th

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Software Supply Chain Security (16th)

Snyk

Ranking in DevSecOps

2nd

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Static Application Security Testing (SAST) (8th), Cloud Management (15th), Container Security (6th), Software Composition Analysis (SCA) (2nd), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of August 2025, in the DevSecOps category, the mindshare of JFrog DevOps Cloud Platform is 0.8%. The mindshare of Snyk is 24.5%, down from 29.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps

Featured Reviews

Fredierick Saladas

DevOps Lead at Standard Chartered Bank

Provides superior integration options and comprehensive reporting features

The product could benefit from enhanced integration capabilities with older software systems and more customizable reporting options. Improved support for mobile devices would also be advantageous, allowing team members to access the system more effectively while on the go. In the next release, we would like to see advanced analytics features, including predictive analytics to help forecast project outcomes. Additionally, a more robust mobile app with offline capabilities would be valuable for remote work scenarios.

Read full review

meetharoon

CEO at a computer software company with 10,001+ employees

Affordable tool boosts code scanning efficiency but faces integration hurdles

The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"They have a professional service team that works alongside their engineering and performance teams."

"I appreciate the features in JFrog DevOps Cloud Platform, especially the efficient file management where downloads and uploads are optimized, saving time. The storage efficiency is also great as it avoids redundancy, which is crucial for our team. It is also quite easy to use, especially for basic commands through the command line. It's straightforward for us internally, and our data is well-hosted on their servers, which makes data location and querying fast and efficient. Moving our storage to JFrog has streamlined our development cycle by eliminating duplicated data, which previously took up extra space locally. This efficiency is crucial for our workflow, although network speeds still play a significant role in performance."

"The most valuable features include task tracking and reporting capabilities."

"The valuable aspect is its security capabilities."

"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."

"Our overall security has improved. We are running fewer severities and vulnerabilities in our packages. We fixed a lot of the vulnerabilities that we didn't know were there."

"We have integrated it into our software development environment. We have it in a couple different spots. Developers can use it at the point when they are developing. They can test it on their local machine. If the setup that they have is producing alerts or if they need to upgrade or patch, then at the testing phase when a product is being built for automated testing integrates with Snyk at that point and also produces some checks."

"The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point."

"The code scans on the source code itself were valuable."

"Static code analysis is one of the best features of the solution."

"The most valuable features include enriched information around the vulnerabilities for better triaging, in terms of the vulnerability layer origin and vulnerability tree."

More Snyk pros

Cons

"Our locations are in different environments, so the remote server takes time to catch up, causing replication delays. The engineering team suggested that this issue would be resolved, but I'm not sure if it has been addressed yet. This is more of a feature enhancement that we suggested."

"The product could benefit from enhanced integration capabilities with older software systems and more customizable reporting options."

"We have encountered stability issues lately, particularly with frequent 500 internal server errors. Despite efforts from our DevOps team to adjust settings, these issues persist, affecting our workflow, especially with machine learning data uploads. Overall, while it's beneficial for storage and accessibility, stability issues need improvement for seamless operations. The occasional occurrence of internal server errors takes several minutes to resolve on their own and can disrupt workflows. Another concern is that sometimes files appear to be successfully uploaded, but then they cannot be downloaded, with no error message indicating the issue during the upload process. This inconsistency needs to be addressed by JFrog to ensure reliable functionality for users like us."

"Snyk's API and UI features could work better in terms of speed."

"I would like to give further ability to grouping code repositories, in such a way that you could group them by the teams that own them, then produce alerting to those teams. The way that we are seeing it right now, the alerting only goes to a couple of places. I wish we could configure the code to go to different places."

"We were using Microsoft Docker images. It was reporting some vulnerabilities, but we were not able to figure out the fix for them. It was reporting some vulnerabilities in the Docker images given by Microsoft, which were out of our control. That was the only limitation. Otherwise, it was good."

"Snyk should improve the scanning capabilities for other languages. For example, Veracode is strong with different languages such as Java, C#, and others."

"We had some issues integrating into our pipeline, however, they were resolved."

"Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR."

"We use Bamboo for CI.CD, and we had problems integrating Snyk with it. Ultimately, we got the two solutions to work together, but it was difficult."

"It would be great if they can include dynamic, interactive, and run-time scanning features. Checkmarx and Veracode provide dynamic, interactive, and run-time scanning, but Snyk doesn't do that. That's the reason there is more inclination towards Veracode, Checkmarx, or AppScan. These are a few tools available in the market that do all four types of scanning: static, dynamic, interactive, and run-time."

More Snyk cons

Pricing and Cost Advice

"Regarding pricing, I focus on the platform's interface and user communication rather than costs."

"The product pricing is competitive but worth negotiating for volume discounts or longer-term contracts."

"We are using the open-source version for the scans."

"The pricing is reasonable."

"The pricing is acceptable, especially for enterprises. I don't think it's too much of a concern for our customers. Something like $99 per user is reasonable when the stakes are high."

"It is pretty expensive. It is not a cheap product."

"The product has good pricing."

"We do have some missing licenses issues, especially with non-SPDX compliant one, but we expect this to be fixed soon"

"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."

"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

15%

Computer Software Company

13%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What needs improvement with JFrog DevOps Cloud Platform?

What advice do you have for others considering JFrog DevOps Cloud Platform?

Overall, the solution has been a great asset to our team. I advise investing time in the initial setup and training to leverage its capabilities fully. Ensure you clearly understand your needs and ...

What is your experience regarding pricing and costs for JFrog DevOps Cloud Platform?

The product pricing is competitive but worth negotiating for volume discounts or longer-term contracts. Licensing options are flexible, but ensure you understand the terms and any additional costs ...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What do you like most about Snyk?

The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

GitHub Advanced Security vs Snyk

Comparisons

No data available

Compared 11% of the time

Trivy vs Snyk

Compared 9% of the time

SonarQube Server (formerly SonarQube) vs Snyk

Compared 8% of the time

Wiz vs Snyk

Compared 7% of the time

Black Duck vs Snyk

Compared 5% of the time

More Snyk Competitors

Product Reports

Software Supply Chain Security

Download JFrog DevOps Cloud Platform product report

Download Snyk product report

Also Known As

No data available

Fugue

Overview

The JFrog DevOps Cloud Platform optimizes software development life cycles through robust artifact management, CI/CD automation, and strong version control. Notable for its security features, it supports seamless software version maintenance and vulnerability scanning. Praised for enhancing organizational efficiency, it ensures faster, secure deliveries, improving collaboration within teams.

JFrog

Snyk's AI Trust Platform empowers developers to innovate securely in AI-driven environments, ensuring rapid and secure software development with enhanced policy governance.

Snyk’s platform integrates AI-ready engines across the software development lifecycle, offering broad coverage with high speed and accuracy essential for fast-paced coding environments. AI-driven features include visibility, prioritization, and tailored security policies that enable proactive threat prevention and quick remediation. By focusing on LLM engineering and AI code analysis, Snyk supports secure and productive development processes. The platform's partnerships, including GenAI code assistants, enhance AI application security by addressing new threats and code velocity challenges.

What are the key features of Snyk?

Easy Integration: Snyk integrates with CI/CD pipelines, GitHub, and JIRA for seamless security management.
Multilingual Support: It offers extensive programming language support, enhancing project compatibility.
Actionable Insights: Provides accurate vulnerability detection with actionable remediation guidance.
Cloud and Container Security: Offers comprehensive checks for cloud and container environments, improving security posture.
Automation & Notifications: Automates vulnerability alerts and notifications for early threat identification in development.

What benefits should users consider in reviews?

Time Efficiency: Speeds up development by identifying and fixing vulnerabilities early in the software lifecycle.
Risk Reduction: Minimizes security risks with extensive vulnerability scanning and proactive alerting.
Productivity Boost: Enhances productivity by integrating security directly into developers' workflows.
Improved Compliance: Aids in maintaining license compliance and managing open-source dependencies effectively.

Snyk is implemented across industries focusing on agile development and DevSecOps, enhancing software delivery speed and security. It is widely used for continuous monitoring and adherence to security and licensing standards, especially in environments relying on Docker image security and CI/CD pipeline integration.

Sample Customers

Information Not Available

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief

JFrog DevOps Cloud Platform vs. Snyk