We performed a comparison between JFrog Xray and Rapid7 Metasploit based on real PeerSpot user reviews.
Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The solution is stable and reliable."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"Good reporting functionalities."
"The reporting on the solution is good."
"Rapid7 Metasploit is a useful product."
"It is scalable. It's in line with our needs."
"The option to generate phishing emails has proven to be very valuable in understanding the behavior of users."
"I use Rapid7 Metasploit for payload generation and Post-Exploitation."
"Technical support has been helpful and responsive."
"It contains almost all the available exploits and payloads."
"The most valuable features of the solution are the scripts, the modules, and the tools that the Rapid7 Metasploit framework has."
"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"JFrog Xray's documentation and error logging could be improved."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"Lacks deeper reporting, the ability to compare things."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"JFrog Xray does not have a dashboard."
"The open-source version has reporting limitations. You need to develop these capabilities yourself. Built-in reporting is an excellent feature for penetration testing, but it isn't a must-have. The solution could also cover more vulnerabilities. Metasploit has around 10,000 exploits in its library, but more is always better."
"We'd like them to offer better coverage of malware."
"Advanced Infrastructure should be implemented in the next release for better orchestration."
"Better automation capabilities would be an improvement."
"The solution is not very scalable, it does not provide any automation to be able to scale it."
"I would like to see more capabilities, more functions, and more features. More types of attack vectors."
"Rapid7 Metasploit could be made easier for new users to learn."
"The solution is not user-friendly and has room for improvement."
JFrog Xray is ranked 16th in Vulnerability Management with 7 reviews while Rapid7 Metasploit is ranked 11th in Vulnerability Management with 18 reviews. JFrog Xray is rated 8.2, while Rapid7 Metasploit is rated 7.6. The top reviewer of JFrog Xray writes "An intelligent solution that prioritizes which vulnerability to target first in your project". On the other hand, the top reviewer of Rapid7 Metasploit writes "Helps find vulnerabilities in a system to determine whether the system needs to be upgraded". JFrog Xray is most compared with Black Duck, Snyk, Mend.io, Veracode and Fortify Static Code Analyzer, whereas Rapid7 Metasploit is most compared with Tenable Nessus, Pentera, Rapid7 InsightVM, Acunetix and Nucleus. See our JFrog Xray vs. Rapid7 Metasploit report.
See our list of best Vulnerability Management vendors.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
