JFrog Xray vs Snyk comparison

Read 47 Snyk reviews

5,927 Views
924 Comparison Views

100% willing to recommend

JFrog Xray

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 4, 2025

Snyk and JFrog Xray are competing products in the software security and vulnerability management category, with Snyk having an advantage in pricing and customer support, while JFrog Xray stands out with its robust features, making it a preferred choice by some as a superior product.

Features: Snyk offers seamless integration with development tools, automated vulnerability fixes, and self-service features with ease of use. JFrog Xray provides in-depth artifact analysis, broad ecosystem support, and native integration with Artifactory for a comprehensive approach to security management.

Room for Improvement: Snyk could expand its vulnerability database for broader coverage and improve flexibility for custom use cases. JFrog Xray could enhance its ease of deployment and offer simpler initial setup procedures to improve user experience, as well as provide more intuitive user interfaces.

Ease of Deployment and Customer Service: Snyk’s cloud-based deployment ensures a quick setup process with responsive customer support. JFrog Xray’s complex deployment options, which include both cloud and on-premises, come with thorough documentation and strong support channels, suited for enterprise needs.

Pricing and ROI: Snyk is often favored for its competitive pricing and strong ROI through effective vulnerability management. Despite higher initial costs, JFrog Xray offers significant ROI supported by its extensive functionality and broad integration capabilities, which may align better with large enterprises needing comprehensive security solutions.

To learn more, read our detailed JFrog Xray vs. Snyk Report (Updated: June 2025).

Download the complete report

JFrog Xray vs. Snyk

June 2025

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

JFrog Xray

Ranking in Container Security

20th

Ranking in Software Composition Analysis (SCA)

6th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Vulnerability Management (32nd), Software Supply Chain Security (2nd)

Snyk

Ranking in Container Security

5th

Ranking in Software Composition Analysis (SCA)

2nd

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Static Application Security Testing (SAST) (7th), Cloud Management (16th), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), DevSecOps (2nd), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of June 2025, in the Container Security category, the mindshare of JFrog Xray is 3.9%, up from 2.1% compared to the previous year. The mindshare of Snyk is 5.5%, down from 6.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security

Featured Reviews

Sai Pradeep Koneti

DevOps Engineer Intern at University of Nebraska at Omaha

Goes deep into the docker files and find out vulnerabilities

When we were trying to get it up and working initially, I found it a bit hard to go through JFrog Xray's documentation and get my error solved. I was facing some issues because we hadn't got a specific license for the tool, but I was able to access it. As a regular user, I regularly saw an error message saying that the license feature was unavailable for my subscription. After a couple of days, I realized I was missing a license. I had to go back to the JFrog Xray team, who provided me with the new license, and then I could complete the setup.

Read full review

meetharoon

CEO at a computer software company with 10,001+ employees

Affordable tool boosts code scanning efficiency but faces integration hurdles

The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."

"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."

"The solution is stable and reliable."

"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."

"Good reporting functionalities."

"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."

"JFrog Xray shows us a list of vulnerabilities that can impact our code."

"JFrog Xray's reporting feature has a lot of options in it, including scanning."

More JFrog Xray pros

"I find SCA to be valuable. It can read your libraries, your license and bring the best way to resolve your problem in the best scenario."

"It has a nice dashboard where I can see all the vulnerabilities and risks that they provided. I can also see the category of any risk, such as medium, high, and low. They provide the input priority-wise. The team can target the highest one first, and then they can go to medium and low ones."

"Snyk has given us really good results because it is fully automated. We don't have to scan projects every time to find vulnerabilities, as it already stores the dependencies that we are using. It monitors 24/7 to find out if there are any issues that have been reported out on the Internet."

"We have integrated it into our software development environment. We have it in a couple different spots. Developers can use it at the point when they are developing. They can test it on their local machine. If the setup that they have is producing alerts or if they need to upgrade or patch, then at the testing phase when a product is being built for automated testing integrates with Snyk at that point and also produces some checks."

"It is a stable solution. Stability-wise, I rate the solution a ten out of ten."

"The valuable aspect is its security capabilities."

"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."

"Our overall security has improved. We are running fewer severities and vulnerabilities in our packages. We fixed a lot of the vulnerabilities that we didn't know were there."

More Snyk pros

Cons

"JFrog Xray's documentation and error logging could be improved."

"Lacks deeper reporting, the ability to compare things."

"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."

"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."

"JFrog Xray does not have a dashboard."

"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."

"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."

"Since we have been using the solution via APIs, there are some limitations in the APIs."

More JFrog Xray cons

"It can be improved from the reporting perspective and scanning perspective. They can also improve it on the UI front."

"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license. Adjusting the policy of the current setup of recording this report is something that can improve. For instance, if you have a certain license, you receive a rating, and the rating of this license remains the same for any use case. No matter if you are using it internally or using it externally, you cannot make the adjustment to your use case. It will always alert as a risky license. The areas of licenses in the reporting and adjustments can be improve"

"They were a couple of issues which happened because Snyk lacked some documentation on the integration side. Snyk is lacking a lot of documentation, and I would like to see them improve this. This is where we struggle a bit. For example, if something breaks, we can't figure out how to fix that issue. It may be a very simple thing, but because we don't have the proper documentation around an issue, it takes us a bit longer."

"Compatibility with other products would be great."

"Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR."

"We tried to integrate it into our software development environment but it went really badly. It took a lot of time and prevented the developers from using the IDE. Eventually, we didn't use it in the development area... I would like to see better integrations to help the developers get along better with the tool. And the plugin for the IDE is not so good. This is something we would like to have..."

"We've also had technical issues with blocking newly introduced vulnerabilities in PRs and that was creating a lot of extra work for developers in trying to close and reopen the PR to get rid of some areas. We ended up having to disable that feature altogether because it wasn't really working for us and it was actually slowing down developer velocity."

"Scalability has some issues because we have a lot of code and its use is mandatory. Therefore, it can be slow at times, especially because there are a lot of projects and reporting. Some UI improvements could help with this."

More Snyk cons

Pricing and Cost Advice

Information not available

"The price is good. Snyk had a good price compared to the competition, who had higher pricing than them. Also, their licensing and billing are clear."

"I would rate the pricing of Snyk at two. I'm currently using the free version, which the company offers before buying the full version. So, the price is affordable, especially for an enterprise."

"The pricing is acceptable, especially for enterprises. I don't think it's too much of a concern for our customers. Something like $99 per user is reasonable when the stakes are high."

"It is pretty expensive. It is not a cheap product."

"With Snyk, you get what you pay for. It is not a cheap solution, but you get a comprehensiveness and level of coverage that is very good. The dollars in the security budget only go so far. If I can maximize my value and be able to have some funds left over for other initiatives, I want to do that. That is what drives me to continue to say, "What's out there in the market? Snyk's expensive, but it's good. Is there something as good, but more affordable?" Ultimately, I find we could go cheaper, but we would lose the completeness of vision or scope. I am not willing to do that because Snyk does provide a pretty important benefit for us."

"Presently, my company uses an open-source version of the solution. The solution's pricing can be considered quite reasonable owing to the features they offer."

"It's inexpensive and easy to license. It comes in standard package sizing, which is straightforward. This information is publicly found on their website."

"Compared to Veracode, Snyk is definitely a cheaper tool."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

25%

Computer Software Company

12%

Manufacturing Company

11%

Government

Financial Services Firm

16%

Computer Software Company

14%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about JFrog Xray?

JFrog Xray shows us a list of vulnerabilities that can impact our code.

What needs improvement with JFrog Xray?

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.

What is your primary use case for JFrog Xray?

Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What do you like most about Snyk?

The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

Prisma Cloud by Palo Alto Networks vs JFrog Xray

Comparisons

Black Duck vs JFrog Xray

Compared 14% of the time

Trivy vs JFrog Xray

Compared 14% of the time

Veracode vs JFrog Xray

Compared 6% of the time

Compared 6% of the time

Checkmarx Software Composition Analysis vs JFrog Xray

Compared 4% of the time

More JFrog Xray Competitors

GitHub Advanced Security vs Snyk

Compared 12% of the time

Trivy vs Snyk

Compared 8% of the time

SonarQube Server (formerly SonarQube) vs Snyk

Compared 8% of the time

Wiz vs Snyk

Compared 8% of the time

CrowdStrike Falcon Cloud Security vs Snyk

Compared 2% of the time

More Snyk Competitors

Product Reports

Download JFrog Xray product report

JFrog Xray

June 2025

Download Snyk product report

May 2025

Also Known As

JFrog Security Essentials

Fugue

Overview

JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

If you are a team player and you care and you play to WIN, we have just the job you're looking for.

As we say at JFrog: "Once You Leap Forward You Won't Go Back!"

JFrog

Snyk's AI Trust Platform empowers developers to innovate securely in AI-driven environments, ensuring rapid and secure software development with enhanced policy governance.

Snyk’s platform integrates AI-ready engines across the software development lifecycle, offering broad coverage with high speed and accuracy essential for fast-paced coding environments. AI-driven features include visibility, prioritization, and tailored security policies that enable proactive threat prevention and quick remediation. By focusing on LLM engineering and AI code analysis, Snyk supports secure and productive development processes. The platform's partnerships, including GenAI code assistants, enhance AI application security by addressing new threats and code velocity challenges.

What are the key features of Snyk?

Easy Integration: Snyk integrates with CI/CD pipelines, GitHub, and JIRA for seamless security management.
Multilingual Support: It offers extensive programming language support, enhancing project compatibility.
Actionable Insights: Provides accurate vulnerability detection with actionable remediation guidance.
Cloud and Container Security: Offers comprehensive checks for cloud and container environments, improving security posture.
Automation & Notifications: Automates vulnerability alerts and notifications for early threat identification in development.

What benefits should users consider in reviews?

Time Efficiency: Speeds up development by identifying and fixing vulnerabilities early in the software lifecycle.
Risk Reduction: Minimizes security risks with extensive vulnerability scanning and proactive alerting.
Productivity Boost: Enhances productivity by integrating security directly into developers' workflows.
Improved Compliance: Aids in maintaining license compliance and managing open-source dependencies effectively.

Snyk is implemented across industries focusing on agile development and DevSecOps, enhancing software delivery speed and security. It is widely used for continuous monitoring and adherence to security and licensing standards, especially in environments relying on Docker image security and CI/CD pipeline integration.

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief