Try our new research platform with insights from 80,000+ expert users

JFrog Xray vs NGINX App Protect comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
6.9
Organizations saw positive ROI with NGINX App Protect during COVID-19, improving security and integration, anticipating future benefits.
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
6.3
NGINX App Protect support is praised for promptness and helpfulness but inconsistencies and costs affect user satisfaction.
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
They were quick and efficient when we had issues.
Project Manager at a comms service provider with 10,001+ employees
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
6.5
NGINX App Protect is scalable with diverse options but faces deployment, traffic, and configuration centralization challenges noted by users.
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
8.4
NGINX App Protect is praised for stability and integration, outperforming competitors, though minor improvements in HTML5 are needed.
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
It is a quality solution, and I would rate its stability as eight out of ten.
IT Architect at a financial services firm with 10,001+ employees
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
NGINX App Protect requires improved flexibility, UI, API, automation, network support, pricing, integration, and feature enhancements like security and documentation.
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
IT Architect at a financial services firm with 10,001+ employees
 

Setup Cost

NGINX App Protect costs $3,000-$400,000 annually, considered expensive but competitive, with no hidden fees and strategic cost management possible.
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
NGINX App Protect provides comprehensive security features including automation, containerization, and flexible API connectivity for robust application protection.
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
IT Architect at a financial services firm with 10,001+ employees
Detecting bots and blocking IPs have proven effective for securing applications.
Project Manager at a comms service provider with 10,001+ employees
 

Categories and Ranking

JFrog Xray
Ranking in Container Security
14th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Vulnerability Management (37th), Software Composition Analysis (SCA) (5th), Software Supply Chain Security (1st)
NGINX App Protect
Ranking in Container Security
27th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
24
Ranking in other categories
Web Application Firewall (WAF) (15th), API Security (7th)
 

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of JFrog Xray is 3.8%, up from 3.2% compared to the previous year. The mindshare of NGINX App Protect is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
JFrog Xray3.8%
NGINX App Protect0.4%
Other95.8%
Container Security
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
JP
Project Manager at a comms service provider with 10,001+ employees
Blocking IPs and detecting bots enhances security for medical websites
I was researching products like NGINX App Protect and F5 Advanced WAF for long-term options. I have some use for such a solution, but probably not before next year Detecting bots and blocking IPs have proven effective for securing applications. We were able to block groups of IP addresses that…
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
9%
Government
5%
Computer Software Company
14%
Financial Services Firm
13%
Comms Service Provider
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise11
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What is your experience regarding pricing and costs for NGINX App Protect?
I don't know the pricing yet because in my other project, I was not part of the buying side and I was just starting to look at options.
What needs improvement with NGINX App Protect?
It would be better if it were easier to implement and if there was more information from F5 regarding hardware requirements and specifications to deploy the service, to avoid disruptions after impl...
 

Also Known As

JFrog Security Essentials
NGINX WAF, NGINX Web Application Firewall
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
Information Not Available
Find out what your peers are saying about JFrog Xray vs. NGINX App Protect and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.