Try our new research platform with insights from 80,000+ expert users

JFrog Xray vs Microsoft Defender Vulnerability Management comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Vulnerability Management
18th
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (3rd)
JFrog Xray
Ranking in Vulnerability Management
37th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Container Security (14th), Software Composition Analysis (SCA) (6th), Software Supply Chain Security (1st)
Microsoft Defender Vulnerab...
Ranking in Vulnerability Management
12th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
16
Ranking in other categories
Advanced Threat Protection (ATP) (18th), Microsoft Security Suite (21st), Risk-Based Vulnerability Management (6th)
 

Mindshare comparison

As of December 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 1.1%, up from 0.2% compared to the previous year. The mindshare of JFrog Xray is 1.6%, up from 1.5% compared to the previous year. The mindshare of Microsoft Defender Vulnerability Management is 2.3%, down from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Microsoft Defender Vulnerability Management2.3%
Zafran Security1.1%
JFrog Xray1.6%
Other95.0%
Vulnerability Management
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
OB
Microsoft Solutions Manager at Self-Employed
Ensures strong threat and vulnerability management with continuous risk assessment
The major priority is identity, which is crucial; we have lots of companies in manufacturing, energy, or various sectors, and it varies from one to another. I assess Microsoft Defender Vulnerability Management as very effective in continuously assessing vulnerabilities without requiring scans. We use automatic investigation and remediation features, safe attachments, safe links, and real-time reports, which are also very effective. For Active Directory, Defender has threat intelligence, and we are using that. The risk-based prioritization within Vulnerability Management affects my ability to manage vulnerabilities, particularly in relation to the Zero Trust Model utilized by our customers. The end-users often do as they please in their systems.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"With JFrog, we can use this registry from any cloud or work locally as well, and it can support multiple packages such as NuGet, pip, and other technologies including Terraform, making credential management very easy."
"The solution is stable and reliable."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
"The product’s most valuable features are compliance, recommendations, and inventories."
"The main advantage of Microsoft Defender Vulnerability Management is that it can locate and prevent most threats even when the endpoints are not connected to the corporate network, as long as the internet is available."
"Microsoft Defender Vulnerability Management has streamlined our threat management processes and provided region-specific customization for our healthcare operations."
"The solution is highly scalable."
"The integration with Sentinel has been one of the most valuable features for my organization."
"The recommendations, scores, and steps to remediate actions are highly useful."
"Microsoft Defender Vulnerability Management is a good product, and I believe it deserves a positive recommendation."
"Overall, I would rate Microsoft Defender Vulnerability Management a nine out of ten."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."
"The UI of JFrog Xray could be improved. There is a dialogue box in the Xray section that doesn't always work properly."
"Lacks deeper reporting, the ability to compare things."
"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."
"JFrog Xray does not have a dashboard."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"JFrog Xray's documentation and error logging could be improved."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"Sometimes the stability of the agents could be improved."
"There is a good solution from Microsoft, however, there is a gap between Windows and Linux management."
"The product is not stable; it is very resource-intensive, consuming a lot of memory and CPU, which makes it slow."
"It is challenging to extract and customize reports from the system."
"Regarding Microsoft's technical support, I would rate it a three out of ten; they could be more responsive and knowledgeable."
"Integration can be improved."
"The constant changes in the product configuration or the console setup can sometimes be challenging."
"The general support could be improved."
 

Pricing and Cost Advice

Information not available
Information not available
"The licensing costs are reasonable."
"The product’s pricing is medium."
"The licensing model follows a per-user per-month structure."
"The tool is a bit costly."
"I rate the product's price a three on a scale of one to ten, where one is a low price, and ten is a high price."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
879,310 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
5%
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
10%
Government
5%
Financial Services Firm
12%
Computer Software Company
10%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one i...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your l...
What needs improvement with Microsoft Defender Vulnerability Management?
The documentation from Microsoft needs significant improvement. The documents are disorganized, with one document lin...
 

Also Known As

No data available
JFrog Security Essentials
No data available
 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Information Not Available
Find out what your peers are saying about JFrog Xray vs. Microsoft Defender Vulnerability Management and other solutions. Updated: December 2025.
879,310 professionals have used our research since 2012.