JFrog Xray vs NGINX App Protect comparison

Cancel
You must select at least 2 products to compare!
JFrog Logo
2,360 views|1,731 comparisons
100% willing to recommend
F5 Logo
518 views|381 comparisons
94% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between JFrog Xray and NGINX App Protect based on real PeerSpot user reviews.

Find out in this report how the two Container Security solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed JFrog Xray vs. NGINX App Protect Report (Updated: March 2024).
770,141 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Good reporting functionalities.""JFrog Xray shows us a list of vulnerabilities that can impact our code.""If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first.""JFrog Xray's reporting feature has a lot of options in it, including scanning.""I would say that this solution has helped our organization by allowing us to automate a lot of the processes.""The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy.""The solution is stable and reliable."

More JFrog Xray Pros →

"It has the best documentation features.""It is a stable solution.""NGINX App Protect has complete control over the HTTP session.""The most valuable feature of NGINX App Protect is its flexibility.""The initial setup was simple and took three to four days.""The most valuable feature of NGINX App Protect is the reverse proxy.""I tested specific features and evaluated the solution against the Web Application Firewall. I conducted research to test different detection percentages. I did not use it directly for protection but for evaluation purposes.""The stability of the product is very impressive since it handles 60,000 to 70,000 requests or transactions per second."

More NGINX App Protect Pros →

Cons
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images.""JFrog Xray does not have a dashboard.""Since we have been using the solution via APIs, there are some limitations in the APIs.""The speed of JFrog Xray should improve. Other solutions have better performance.""JFrog Xray's documentation and error logging could be improved.""Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool.""Lacks deeper reporting, the ability to compare things."

More JFrog Xray Cons →

"NGINX App Protect could improve security.""The configuration needs to be more flexible because it is difficult to do things that are outside of the ordinary.""I encountered issues with NGINX App Protect while trying to upgrade custom rules.""Right now, the tool doesn't provide an option revolving around update feeds, specifically the signature update option in the UI.""The integration of NGINX App Protect could improve.""They could provide a better user interface.""The dashboard could provide a more comprehensive view of the status of the connections.""Its technical support could be better."

More NGINX App Protect Cons →

Pricing and Cost Advice
Information Not Available
  • "The licensing fees for this solution are pretty expensive for what it does, but there is no alternative."
  • "Our licensing costs are about $40,000 a year."
  • "Really understand the licensing model, because we underestimated that."
  • "There are no additional fees."
  • "NGINX is not expensive."
  • "The pricing is reasonable because NGINX operates on an instance basis."
  • "There is a license needed to use NGINX App Protect."
  • "There are not any additional costs we had to pay to use NGINX App Protect."
  • More NGINX App Protect Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Container Security solutions are best for your needs.
    770,141 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:JFrog Xray shows us a list of vulnerabilities that can impact our code.
    Top Answer:There is a tool called DefectDojo for reporting. Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore… more »
    Top Answer:We use this solution to identify vulnerabilities in the dependency file. We have the Artifactory package which integrates with Xray-like plugins. We can automatically plug this tool into Xray to… more »
    Top Answer:The solution has yearly, three-year, and five-year subscriptions.
    Top Answer:NGINX App Protect could provide a better user interface.
    Ranking
    18th
    out of 59 in Container Security
    Views
    2,360
    Comparisons
    1,731
    Reviews
    6
    Average Words per Review
    495
    Rating
    8.2
    20th
    out of 59 in Container Security
    Views
    518
    Comparisons
    381
    Reviews
    9
    Average Words per Review
    334
    Rating
    8.7
    Comparisons
    Also Known As
    JFrog Security Essentials
    NGINX WAF, NGINX Web Application Firewall
    Learn More
    Overview

    JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

    If you are a team player and you care and you play to WIN, we have just the job you're looking for.

    As we say at JFrog: "Once You Leap Forward You Won't Go Back!"​

    NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:

    • Integrating security controls directly into the development automation pipeline
    • Applying and managing security for modern and distributed application environments such as containers and microservices
    • Providing the right level of security controls without impacting release and go-to-market velocity
    • Complying with security and regulatory requirements

    NGINX App Protect offers:

    • Expanded security beyond basic signatures to ensure adequate controls
    • F5 app‑security technology for efficacy superior to ModSecurity and other WAFs
    • Confidently run in “blocking” mode in production with proven F5 expertise
    • High‑confidence signatures for extremely low false positives
    • Increases visibility, integrating with third‑party analytics solutions
    • Integrates security and WAF natively into the CI/CD pipeline
    • Deploys as a lightweight software package that is agnostic of underlying infrastructure
    • Facilitates declarative policies for “security as code” and integration with DevOps tools
    • Decreases developer burden and provides feedback loop for quick security remediation
    • Accelerates time to market and reduces costs with DevSecOps‑automated security
    Sample Customers
    google, amazon, cisco, netflix, oracle, vmware, facebook
    Information Not Available
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm23%
    Manufacturing Company14%
    Computer Software Company12%
    Insurance Company5%
    REVIEWERS
    Financial Services Firm33%
    Comms Service Provider33%
    Insurance Company17%
    Computer Software Company17%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm11%
    Comms Service Provider9%
    Healthcare Company7%
    Company Size
    REVIEWERS
    Midsize Enterprise29%
    Large Enterprise71%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise10%
    Large Enterprise75%
    REVIEWERS
    Small Business26%
    Midsize Enterprise26%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise14%
    Large Enterprise61%
    Buyer's Guide
    JFrog Xray vs. NGINX App Protect
    March 2024
    Find out what your peers are saying about JFrog Xray vs. NGINX App Protect and other solutions. Updated: March 2024.
    770,141 professionals have used our research since 2012.

    JFrog Xray is ranked 18th in Container Security with 7 reviews while NGINX App Protect is ranked 20th in Container Security with 19 reviews. JFrog Xray is rated 8.2, while NGINX App Protect is rated 8.2. The top reviewer of JFrog Xray writes "An intelligent solution that prioritizes which vulnerability to target first in your project". On the other hand, the top reviewer of NGINX App Protect writes "Capable of complete automation but is costly ". JFrog Xray is most compared with Black Duck, Snyk, Veracode, Mend.io and Trivy, whereas NGINX App Protect is most compared with AWS WAF, Microsoft Azure Application Gateway, F5 Advanced WAF, Fortinet FortiWeb and Cloudflare Web Application Firewall. See our JFrog Xray vs. NGINX App Protect report.

    See our list of best Container Security vendors.

    We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.