No more typing reviews! Try our Samantha, our new voice AI agent.

JFrog Xray vs The NodeZero Platform by Horizon3.ai comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
3.2
NodeZero Platform enhances network security with automation, offering 99.9% improvement, reduced costs, and increased ROI over traditional methods.
A reduction in remediation time has been seen because it is finding things before they happen.
Director of Enterprise Security at a energy/utilities company with 51-200 employees
Being able to find them because there have been no eyes on that particular section so far ever, and fixing those potentially prevented those companies from getting breached.
IT Security Consultant at Systemhaus for you GmbH
So far, I have seen a return on investment with The NodeZero Platform by Horizon3.ai, as we managed to save a lot of time and effort with this because this is an autonomous tool, and our manual effort is significantly reduced because of a product of this type.
Senior Manager | Manager Security Services at RISK ASSOCIATES
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
6.9
NodeZero Platform is praised for exceptional customer service, with quick, effective responses and high user satisfaction ratings.
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
Overall, when it comes to The NodeZero Platform's tech support, you can reach them via a chat message on their website, and they respond almost immediately.
Director of IT Security at a manufacturing company with 1,001-5,000 employees
Previously, with time-sensitive engagements, I would worry about resolving issues before deadlines. That concern has diminished as they've become more responsive and require less escalation to engineering.
Principal Consultant at JTI Cybersecurity
The vast majority of times they are able to resolve the exact questions my team has on the first attempt, which is really good for customer or technical support.
Chief Information Officer at a construction company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
7.0
NodeZero by Horizon3.ai is highly scalable for enterprise environments, managing large networks and assets efficiently with minimal issues.
According to my use case, it is highly scalable.
DevOps Engineer at Syvora
We have conducted pen tests in environments with hundreds of thousands of IP addresses without any scalability issues.
CEO at cybovate
We currently scan approximately 1,500-2,000 assets and haven't encountered any scaling or throughput issues.
Information Security Manager at a non-profit with 51-200 employees
Anywhere you can put a VM, you can run another concurrent scan.
Director of IT Security at a manufacturing company with 1,001-5,000 employees
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
8.0
Users rate the NodeZero Platform highly for stability, with no major disruptions, despite minor, easily resolved issues.
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
We have not encountered any issues on the platform regarding accessibility, performance, or stability.
CEO at cybovate
Regarding stability, it has never crashed, and there has not been any lagging from deployment or running.
Director of Enterprise Security at a energy/utilities company with 51-200 employees
I would rate the stability of The NodeZero Platform by Horizon3.ai as a ten.
Senior Manager | Manager Security Services at RISK ASSOCIATES
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
NodeZero Platform requires improvements in notifications, reporting, risk scoring, detection, customizability, scalability, automation, and affordability.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
This service reveals which credentials and email addresses are available on the deep web, as well as which domains have been set up using typo-squatting techniques.
Information Security Manager at a non-profit with 51-200 employees
The one thing that is very much asked from us as a service provider is DAST testing, so when a company is building a software, they could see their current security status while they are building the application.
Offensive Security Analyst at a tech services company with 201-500 employees
One of the areas where improvement is needed is in the visibility and reporting for large enterprises.
CEO at cybovate
 

Setup Cost

NodeZero Platform offers cost-effective vulnerability scanning, cheaper than manual tests, with flexible licensing and minimal setup costs.
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
The pricing is much more affordable than traditional penetration tests.
Manager, Information Technology at a performing arts with 11-50 employees
It's a bit cheaper than manual penetration testing because manual testing typically allows you to scan only a few subnets.
Works at a hospitality company with 201-500 employees
Usually, manual penetration test scans take considerable time and money.
Security Engineer at Herjavec Group
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
NodeZero Platform by Horizon3.ai enhances vulnerability management with quick remediation, automation, and user-friendly interface, reducing retest time.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
When a new vulnerability, such as a zero-day exploit, is identified, they review your previous scans to determine if you might be vulnerable to it, and they proactively notify you.
Director of IT Security at a manufacturing company with 1,001-5,000 employees
The detailed reports not only list the vulnerabilities that matter, but they also include direct links to patches.
Information Security Manager at a non-profit with 51-200 employees
The NodeZero Platform's real attack capabilities help in identifying vulnerabilities on our on-prem systems because it provides actual vulnerabilities by attacking our systems.
Chief Information Security Officer at a construction company with 1,001-5,000 employees
 

Categories and Ranking

JFrog Xray
Ranking in Vulnerability Management
39th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Container Security (14th), Software Composition Analysis (SCA) (5th), Software Supply Chain Security (2nd)
The NodeZero Platform by Ho...
Ranking in Vulnerability Management
16th
Average Rating
8.6
Reviews Sentiment
5.9
Number of Reviews
18
Ranking in other categories
Advanced Threat Protection (ATP) (11th), Penetration Testing Services (1st), Breach and Attack Simulation (BAS) (1st), Risk-Based Vulnerability Management (5th)
 

Mindshare comparison

As of March 2026, in the Vulnerability Management category, the mindshare of JFrog Xray is 1.4%, down from 1.6% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 1.5%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
The NodeZero Platform by Horizon3.ai1.5%
JFrog Xray1.4%
Other97.1%
Vulnerability Management
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
Hussain Z - PeerSpot reviewer
Senior Manager | Manager Security Services at RISK ASSOCIATES
Automated testing has transformed how we deliver fast, consistent security assessments
The key capabilities of the NodeZero platform by Horizon3.ai that I have found most valuable are its speed, scalability, and consistency. It is able to cover a broad scope in a relatively short period of time, which delivers significant efficiency gains when compared with traditional manual testing. It also provides a more consistent outcome, as the process is not influenced by human bias or variability. One of the most valuable features is the ability for security teams to remediate and retest vulnerabilities immediately. The one-click verification capability is particularly effective, as it allows fixes to be validated quickly without the need to rerun the entire assessment. This streamlines the remediation cycle and supports faster confirmation of security improvements. The platform’s real attack capabilities have also helped reduce false positives in the identification of vulnerabilities across our on-premises systems. Because the findings are evidence-based and validated prior to reporting, the results are more reliable and actionable. This enables us to focus our efforts on confirmed security issues that genuinely require attention, rather than spending time investigating theoretical or unverified exposures. The NodeZero platform also strengthens my understanding of potential security threats through its continuously updated capabilities. With new vulnerabilities emerging and being exploited in the wild on a regular basis, it is valuable to have a platform backed by a strong research and development function that continuously updates attack content to reflect the current threat landscape. This makes the platform effective not only as a point-in-time validation tool, but as part of an ongoing and continuous security assurance programme.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
11%
Computer Software Company
9%
Government
5%
Comms Service Provider
10%
Manufacturing Company
8%
Government
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What needs improvement with Horizon3.ai?
Improvements with The NodeZero Platform by Horizon3.ai are already underway; many people mention infrastructure testing is well-handled, but they seek better web application testing, which is curre...
What is your primary use case for Horizon3.ai?
My main use case for The NodeZero Platform by Horizon3.ai is to demo the platform to our channel partners and any end-user customers that they bring us, and also for my own benefit, as we look at o...
What advice do you have for others considering Horizon3.ai?
The way you find a vulnerability with The NodeZero Platform by Horizon3.ai, you can also fix and then verify if that vulnerability has been solved, which is the selling point itself, emphasizing ex...
 

Also Known As

JFrog Security Essentials
Horizon3.ai
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.
Find out what your peers are saying about JFrog Xray vs. The NodeZero Platform by Horizon3.ai and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.