JFrog Xray vs Prisma Cloud by Palo Alto Networks comparison

JFrog Xray vs. Prisma Cloud by Palo Alto Networks

July 2025

Download the complete report

Helped 867,349 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

3.5

JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.

Sentiment score

7.3

Prisma Cloud enhances security and efficiency, reducing risks and response times, offering significant value despite initial costs.

No quotes available

For more quotes and insights, download the JFrog Xray report

It eliminates the need for additional hardware, making it a financially and technically sound investment.

Altug Yildirim

Partner at Quasys

Reputation and data security are the two most important things to a financial institution.

Pushpak S Laddha

Works at a comms service provider with 1-10 employees

We may have prevented a security breach with remediation of the findings.

Mindaugas Dailidonis

Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Customer Service

Sentiment score

4.0

JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.

Sentiment score

7.1

Prisma Cloud support is praised for responsiveness, though some report slow responses and varying support quality across regions.

When we need clarifications, we contact our account manager, and they arrange demos.

Development Senior at a financial services firm with 5,001-10,000 employees

On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.

For more quotes and insights, download the JFrog Xray report

DevSecOps Engineer at a tech services company with 501-1,000 employees

They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.

Breider Alexander Santacruz

Technical Lead at a consultancy with 11-50 employees

When you begin to deal with production workloads, issues need to be resolved faster.

Sumedha Shetty

Customer Engineer at a tech services company with 501-1,000 employees

You do not even get a valid or contextual answer.

Suhan Shetty

Solutions Architect at Niveus Solutions

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Scalability Issues

Sentiment score

6.8

JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.

Sentiment score

7.8

Prisma Cloud scales well across environments, integrates seamlessly, and automates operations, though costs rise with increased licenses.

According to my use case, it is highly scalable.

For more quotes and insights, download the JFrog Xray report

DevOps Engineer at Syvora

It's very scalable and very easy to use.

Vijay Shankar Maurya

Cloud Security Engineer at eSec Forte® Technologies

It's scalable.

reviewer2293101

Sr Security Engineer at a financial services firm with 201-500 employees

The scalability is also a 10 out of 10.

Sachin Mishra

Devops consultant at eSec Forte

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Stability Issues

Sentiment score

7.6

JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.

Sentiment score

8.0

Prisma Cloud offers reliable performance and stability, effectively handling environments with rare interruptions and quickly resolved issues.

I use JFrog Xray primarily for security purposes, and I find it reliable.

DevOps Engineer at Syvora

We did experience crashes, downtimes, and performance issues with JFrog Xray.

For more quotes and insights, download the JFrog Xray report

DevSecOps Engineer at a tech services company with 501-1,000 employees

I would rate it a ten out of ten for stability.

reviewer2559921

Cloud Security Engineer (Team lead) at a tech services company with 201-500 employees

There were some instances when it was not as stable, particularly the Defender setup, where it did not work for three days, so my team had to escalate, and then it suddenly worked.

Suhan Shetty

Solutions Architect at Niveus Solutions

Prisma Cloud is a stable platform.

Aditya Thakur

Cloud Security Engineer at eSec Forte® Technologies

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.

Prisma Cloud needs improvements in documentation, UI, automation, integrations, pricing, and support, with challenges in compliance and cloud support.

When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.

DevOps Engineer at Syvora

somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.

DevSecOps Engineer at a tech services company with 501-1,000 employees

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

From a developer's perspective, especially for organizations like banks developing their applications, ensuring API security before deploying them to the cloud is crucial.

Gideon Crous

Solution Manager at Cyberlinx

Prisma Cloud is an excellent tool.

reviewer2540838

Technical Engineer at a tech services company with 1,001-5,000 employees

Even though documentation was available, it took a while for a new person to understand what integration meant, what will be achieved after the integration, or how the integration needed to be done on the Azure or AWS side.

HemantMahajan

Technical Architect at a tech services company with 1,001-5,000 employees

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Setup Cost

Prisma Cloud is expensive but valued for comprehensive security, flexible licensing, and potential cost savings in multi-cloud environments.

JFrog Xray provides a free trial of 14 days.

DevOps Engineer at Syvora

The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

The cost was not on the higher side.

HemantMahajan

Technical Architect at a tech services company with 1,001-5,000 employees

That's why a lot of our clients are shifting from cloud-native to Prisma Cloud: because of its effectiveness and because it is budget-friendly as well.

Sachin Mishra

Devops consultant at eSec Forte

The solution is very expensive.

reviewer1411233

Security consultant at a computer software company with 1,001-5,000 employees

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.

Prisma Cloud enhances security with dynamic identity creation, compliance management, and integration across AWS and CI/CD pipelines.

The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.

Development Senior at a financial services firm with 5,001-10,000 employees

The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.

DevSecOps Engineer at a tech services company with 501-1,000 employees

With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.

For more quotes and insights, download the JFrog Xray report

DevOps Engineer at Syvora

CSPM can audit the current cloud configuration, identify misconfigurations, and assess risk.

Manjeet Yadav

Principal Cyber Security Technologist at a computer software company with 201-500 employees

It provides security across AWS, GCP, Azure, Oracle, and Alibaba.

Sumedha Shetty

Customer Engineer at a tech services company with 501-1,000 employees

Since the agent is already installed in the container, we can protect it directly from the application side.

Anubhav_Sharma

Senior Security Engineer lll at a financial services firm with 501-1,000 employees

For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report

Categories and Ranking

JFrog Xray

Ranking in Container Security

18th

Average Rating

7.8

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Vulnerability Management (32nd), Software Composition Analysis (SCA) (6th), Software Supply Chain Security (2nd)

Prisma Cloud by Palo Alto N...

Ranking in Container Security

1st

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

111

Ranking in other categories

Web Application Firewall (WAF) (6th), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)

Mindshare comparison

As of September 2025, in the Container Security category, the mindshare of JFrog Xray is 3.8%, up from 2.3% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 10.9%, down from 15.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Prisma Cloud by Palo Alto Networks	10.9%
JFrog Xray	3.8%
Other	85.3%

Container Security

Featured Reviews

Offers flexibility across clouds and easy credential management while interface improvements are needed

DevOps Engineer at Syvora

For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.

Read full review

Harsh_Vardhan

Cloud security architect at a tech vendor with 10,001+ employees

Provides visibility and control that our customers need

Different modules are valuable for different customers. We are leveraging CSPM. It is one of the best solutions for comprehensive visibility into cloud resource configurations and compliance. It has a lot of out-of-the-box policies, and the visibility that we are getting is impressive. The DSPM module is valuable. This is the latest one that Palo Alto procured from Dig Security. No competitor provides this functionality in a single pane of glass. The support for Linux and container security is also very good. That is the beauty of Prisma Cloud. However, in terms of Windows security, Prisma Cloud is lacking because currently, there is no runtime protection available. The UI is very good. We get all the things within a single UI. It is easy to use. A new user can easily understand it. It is very user-friendly.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

867,349 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

25%

Manufacturing Company

12%

Computer Software Company

11%

Government

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	1
Midsize Enterprise	3
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	34
Midsize Enterprise	20
Large Enterprise	58

Questions from the Community

What do you like most about JFrog Xray?

JFrog Xray shows us a list of vulnerabilities that can impact our code.

What needs improvement with JFrog Xray?

The UI of JFrog Xray could be improved. There is a dialogue box in the Xray section that doesn't always work properly. When we have given a very long tag, it doesn't work as expected and requires e...

What is your primary use case for JFrog Xray?

I work with JFrog Xray. I use JFrog as an Artifactory registry and package registry. In JFrog Xray, there are many artifactories. I can configure tokens for each repository and give access to speci...

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

More JFrog Xray Competitors

Comparisons

Trivy vs JFrog Xray

Compared 14% of the time

Black Duck vs JFrog Xray

Compared 12% of the time

Veracode vs JFrog Xray

Compared 6% of the time

Wiz vs JFrog Xray

Compared 6% of the time

Mend.io vs JFrog Xray

Compared 5% of the time

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 16% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 10% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 6% of the time

Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

Trivy vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Product Reports

Download JFrog Xray product report

JFrog Xray

September 2025

Prisma Cloud by Palo Alto Networks

August 2025

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Also Known As

JFrog Security Essentials

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Overview

JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

If you are a team player and you care and you play to WIN, we have just the job you're looking for.

As we say at JFrog: "Once You Leap Forward You Won't Go Back!"

JFrog

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America