Try our new research platform with insights from 80,000+ expert users

JFrog Xray vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 7, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
6.7
Snyk significantly boosts productivity and ROI by enhancing vulnerability management, offering quick integration, and providing cost-saving preventative measures.
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
7.5
Snyk's support is generally praised for direct expert access and proactive communication, though some desire faster, clearer responses.
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
When we need clarifications, we contact our account manager, and they arrange demos.
Their response time aligns with their SLA commitments.
Our long-standing association has ensured smooth communication, resulting in favorable support experiences and satisfactory issue resolution.
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
7.3
Snyk scales well with extensive repositories, though users want faster bulk processing and improved UI, appreciating integration ease.
According to my use case, it is highly scalable.
Snyk allows for scaling across large organizations, accommodating tens of thousands of applications and over 60,000 repositories.
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
7.8
Snyk is stable with minimal downtime, reliable performance, responsive support, and highly rated stability for cloud and on-prem setups.
I use JFrog Xray primarily for security purposes, and I find it reliable.
We did experience crashes, downtimes, and performance issues with JFrog Xray.
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
Snyk requires improved language support, IDE integration, UI, accuracy, reporting, automation, documentation, API access, and AI-driven vulnerability detection.
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
It lacks the ability to select branches on its Web UI, forcing users to rely on CLI or CI/CD for that functionality.
Both Veracode and Snyk should implement this new scoring system for CVSS and AIVSS.
The inclusion of AI to remove false positives would be beneficial.
 

Setup Cost

Snyk offers competitive, scalable pricing based on committers, providing value and flexibility for large-scale enterprise deployments.
JFrog Xray provides a free trial of 14 days.
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
After negotiations, we received a special package with a good price point.
Snyk is recognized as the cheapest option we have evaluated.
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
Snyk excels with its ease of integration, extensive vulnerability management, and cost-effective support for multiple development tools and languages.
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
Our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.
Snyk helps detect vulnerabilities before code moves to production, allowing for integration with DevOps and providing a shift-left advantage by identifying and fixing bugs before deployment.
The best feature of Snyk is the integration with our ticketing system, which is Jira.
 

Categories and Ranking

JFrog Xray
Ranking in Container Security
18th
Ranking in Software Composition Analysis (SCA)
6th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Vulnerability Management (32nd), Software Supply Chain Security (2nd)
Snyk
Ranking in Container Security
6th
Ranking in Software Composition Analysis (SCA)
2nd
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
48
Ranking in other categories
Application Security Tools (8th), Static Application Security Testing (SAST) (8th), Cloud Management (15th), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (17th), DevSecOps (2nd), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of September 2025, in the Container Security category, the mindshare of JFrog Xray is 3.8%, up from 2.3% compared to the previous year. The mindshare of Snyk is 5.3%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
Snyk5.3%
JFrog Xray3.8%
Other90.9%
Container Security
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
meetharoon - PeerSpot reviewer
Affordable tool boosts code scanning efficiency but faces integration hurdles
The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
11%
Government
5%
Financial Services Firm
15%
Computer Software Company
13%
Manufacturing Company
9%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise8
Large Enterprise21
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
The UI of JFrog Xray could be improved. There is a dialogue box in the Xray section that doesn't always work properly. When we have given a very long tag, it doesn't work as expected and requires e...
What is your primary use case for JFrog Xray?
I work with JFrog Xray. I use JFrog as an Artifactory registry and package registry. In JFrog Xray, there are many artifactories. I can configure tokens for each repository and give access to speci...
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
 

Comparisons

 

Also Known As

JFrog Security Essentials
Fugue
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about JFrog Xray vs. Snyk and other solutions. Updated: July 2025.
867,370 professionals have used our research since 2012.