Try our new research platform with insights from 80,000+ expert users

JFrog Xray vs Tenable Cloud Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
5.3
Tenable Cloud Security is praised for cost-effectiveness, yielding positive ROI and satisfactory financial benefits despite limited specific metrics.
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
3.4
Tenable Cloud Security support receives mixed reviews, praised for responsiveness but criticized for delays and inconsistency in assistance.
When we need clarifications, we contact our account manager, and they arrange demos.
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
With Element, if you need a feature, you can discuss it with them, and if implementation is possible, you will have that feature within a month or two, depending on complexity.
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
5.8
Tenable Cloud Security is praised for its scalability and adaptability, although complex multi-cloud asset management requires improvements.
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
7.8
Tenable Cloud Security is stable with high user ratings, though some suggest minor improvements despite no major outages.
I use JFrog Xray primarily for security purposes, and I find it reliable.
We did experience crashes, downtimes, and performance issues with JFrog Xray.
In situations where there was a platform issue, they fixed it immediately and provided a complete explanation for the occurrence.
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
Tenable Cloud Security needs faster operations, improved support, detailed reporting, AI integration, and easier multi-cloud implementation.
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Currently, with resource constraints, we need tools to collect and aggregate data, eliminate false positives as much as possible, and present relevant information to employees for action.
The only complaint I hear in the market is from resellers that Tenable management team in Brazil doesn't play fair with the channel and resellers.
 

Setup Cost

Users find Tenable Cloud Security's subscription model reasonably priced and well-suited for enterprises, offering good value compared to competitors.
JFrog Xray provides a free trial of 14 days.
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
Tenable Cloud Security offers comprehensive vulnerability detection, deep cloud analysis, IAM features, and multi-cloud integration into a single dashboard.
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
The automatic integration capabilities, particularly with DNS, Azure, and AWS, are extremely valuable.
The best features Tenable Cloud Security offers in my experience are automatic scanning, frequent scanning, and automatic finding, which I find valuable.
Perhaps the best functionalities are related to promoting a deeper analysis of the environment where applications are running in terms of creating a double armor of security to block threats that may come in the cloud with Tenable Cloud Security.
 

Categories and Ranking

JFrog Xray
Ranking in Container Security
16th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Vulnerability Management (36th), Software Composition Analysis (SCA) (6th), Software Supply Chain Security (2nd)
Tenable Cloud Security
Ranking in Container Security
24th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
Identity and Access Management as a Service (IDaaS) (IAMaaS) (12th), Cloud Workload Protection Platforms (CWPP) (11th), Cloud Security Posture Management (CSPM) (17th), Cloud-Native Application Protection Platforms (CNAPP) (13th), Cloud Infrastructure Entitlement Management (CIEM) (4th)
 

Mindshare comparison

As of October 2025, in the Container Security category, the mindshare of JFrog Xray is 4.0%, up from 2.6% compared to the previous year. The mindshare of Tenable Cloud Security is 1.5%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
JFrog Xray4.0%
Tenable Cloud Security1.5%
Other94.5%
Container Security
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
DragosCernat - PeerSpot reviewer
Has significantly improved proactive monitoring through automated asset discovery and seamless integration with cloud environments
Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Adding capabilities for the scanner to automatically pick up changes and add assets automatically would be valuable. When discussing a big company, it is mandatory to have tools that will assist us rather than waiting for manual input to add hosts. Adding assets manually is prone to mistakes. Humans might forget to add an asset or make errors when adding multiple assets. Taking the human element out of the context and making it more streamlined is the future for security. The human should be involved where expertise is needed, such as analysis and decision-making. Currently, with resource constraints, we need tools to collect and aggregate data, eliminate false positives as much as possible, and present relevant information to employees for action.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
10%
Government
5%
Computer Software Company
13%
Government
11%
Financial Services Firm
10%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What do you like most about Tenable Cloud Security?
The solution’s vulnerability management feature has helped us identify and mitigate risks well.
What needs improvement with Tenable Cloud Security?
I think Tenable Cloud Security could be improved with more clear licensing. What I would like to see improved with licensing is how they're used in the product. The calculations of what is consider...
What is your primary use case for Tenable Cloud Security?
My main use case for Tenable Cloud Security is managing our security compliance and security posture. I use Tenable Cloud Security for managing compliance and security posture, and we rely on the c...
 

Also Known As

JFrog Security Essentials
Ermetic, Ermetic Identity Governance for AWS
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.
Find out what your peers are saying about JFrog Xray vs. Tenable Cloud Security and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.