Try our new research platform with insights from 80,000+ expert users

FortiCNAPP vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 18, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.1
FortiCNAPP enhances security, saves time and costs by automating alerts and reducing manual efforts, justifying its investment.
Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
 

Customer Service

Sentiment score
7.9
FortiCNAPP’s customer service is praised for responsiveness, proactive communication, and efficient issue resolution via Slack and email.
Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Technical support from Fortinet is good; I get feedback and responses quickly.
Software Engineer at a university with 5,001-10,000 employees
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Scalability Issues

Sentiment score
7.5
FortiCNAPP is praised for scalability and adaptability, with positive integration across environments, but challenges include high-traffic scenarios.
Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
According to my use case, it is highly scalable.
DevOps Engineer at Syvora
 

Stability Issues

Sentiment score
7.4
FortiCNAPP is stable, with occasional minor detection issues and lags, yet frequent updates maintain steady performance.
Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
 

Room For Improvement

FortiCNAPP requires improvements in integration, security features, user interface, alert management, and data visibility for enhanced user experience.
Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly.
Software Engineer at a university with 5,001-10,000 employees
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Setup Cost

FortiCNAPP pricing is flexible and stable, with costs ranging from $80,000 to $200,000 annually, not seen as prohibitive.
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Valuable Features

FortiCNAPP excels in compliance, threat detection, integration, and automation, enhancing security and efficiency in multi-cloud environments.
JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
The machine learning capability in Lacework FortiCNAPP is used for threat detection.
Software Engineer at a university with 5,001-10,000 employees
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
 

Categories and Ranking

FortiCNAPP
Ranking in Vulnerability Management
41st
Ranking in Container Security
30th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (18th), Cloud Security Posture Management (CSPM) (26th), Cloud-Native Application Protection Platforms (CNAPP) (16th), Compliance Management (10th)
JFrog Xray
Ranking in Vulnerability Management
39th
Ranking in Container Security
14th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Software Composition Analysis (SCA) (5th), Software Supply Chain Security (1st)
 

Mindshare comparison

As of February 2026, in the Vulnerability Management category, the mindshare of FortiCNAPP is 1.7%, up from 1.3% compared to the previous year. The mindshare of JFrog Xray is 1.4%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
JFrog Xray1.4%
FortiCNAPP1.7%
Other96.9%
Vulnerability Management
 

Featured Reviews

SK
Software Engineer at a university with 5,001-10,000 employees
Improving security insights has been helpful but inconsistent vulnerability tracking needs attention
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. Regarding improvements, the vulnerability part, recent changes with user management, and Fortinet IM coming into place, which is not helpful at all because it cuts out the automation part, are the most important things. Lacework FortiCNAPP should have a new clean UI and ease of access for the users as that should be the main concern. There are limitations regarding the scalability of Lacework FortiCNAPP. There are also more limitations with integrations like GitHub or any other pipeline, CI/CD, or ISD. It is glitchy and works well only sometimes, and most of the time, the reports or other things are not properly calculated or circulated with the teams.
Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
7%
University
6%
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
9%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Lacework?
My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz.
What needs improvement with Lacework?
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly. Regarding improvements, the vulnerability part, recent changes with user managem...
What is your primary use case for Lacework?
The major use case for Lacework FortiCNAPP is for security. I'm using it for security internally for my company.
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
 

Comparisons

 

Also Known As

Polygraph, FortiCNP, Lacework
JFrog Security Essentials
 

Overview

 

Sample Customers

J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about FortiCNAPP vs. JFrog Xray and other solutions. Updated: January 2026.
881,733 professionals have used our research since 2012.