No more typing reviews! Try our Samantha, our new voice AI agent.

JFrog Xray vs Vicarius vRx comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
8.1
MSPs and clients achieved significant time, cost, and efficiency gains with Vicarius vRx, realizing a 40% ROI.
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
8.0
Vicarius vRx customer service is praised for responsiveness, professionalism, and effectiveness, with high ratings and efficient communication.
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
Their support is very good, and they respond quickly.
Network & Security Manager at a government with 201-500 employees
During the POC and the implementation, they were very available and made their best efforts to help us.
DevOps Tech Lead at Earnix Ltd.
Whenever I've contacted them, they respond promptly with a callback or by email.
Systems Admin at a computer software company with 201-500 employees
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
7.8
Vicarius vRx scales well, featuring easy deployment across endpoints, but some face challenges during large system updates.
According to my use case, it is highly scalable.
DevOps Engineer at Syvora
It is very simple; you just script it, and then the computers connect themselves.
Information Systems Supervisor at a manufacturing company with 11-50 employees
When we attempted to scale this and update 200 systems, that just locked it.
Works at a manufacturing company with 51-200 employees
We have some clients with up to a thousand agents.
Network & Security Manager at a government with 201-500 employees
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
7.3
Users generally find Vicarius vRx stable and efficient, despite occasional deployment challenges and update-related high CPU usage.
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
There are some issues that they do not even know how to fix at this point.
Works at a manufacturing company with 51-200 employees
I would rate the stability of Vicarius vRx ten out of ten.
Information Security Manager at Pango
There are some issues like high CPU usage during updates, but these were fixed.
IT Manager & Sys Admin at a non-tech company with 51-200 employees
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
Vicarius vRx needs improved automation, simplified login, better integration, UI, and advanced management features for enhanced user experience.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
I am pretty sure that the tool works great when it comes to Windows, but when you are in an environment that has different flavors of Linux at different version levels, that may pose an issue.
Works at a manufacturing company with 51-200 employees
We have the ability to search across the network for all switches, routers, and printers, but some devices might be outdated and have vulnerabilities.
Network & Security Manager at a government with 201-500 employees
Enhancing Vicarius vRx with improved third-party integrations, like notifications for external systems, and increased cloud integration for richer instance information, would be valuable improvements.
DevOps Tech Lead at Earnix Ltd.
 

Setup Cost

Vicarius vRx offers scalable per-asset pricing, competitive yet costly, with negotiable rates appealing to resellers but challenging for smaller entities.
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
It was very cheap.
Works at a manufacturing company with 51-200 employees
In the past, Vicarius vRx was cheap, but now they have adjusted their pricing policy, resulting in higher renewal costs.
Network & Security Manager at a government with 201-500 employees
From a pricing perspective, Vicarius was cheaper compared to other competitors.
DevOps Tech Lead at Earnix Ltd.
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
Vicarius vRx offers automated patching, vulnerability management, and a user-friendly interface, greatly reducing manual tasks for IT teams.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
It's a valuable tool that reduces tension between IT and security teams by providing time to properly install patches.
Information Security Manager at Pango
The system prioritizes vulnerabilities, identifying high, medium, and low risks, allowing us to focus on high-risk applications.
Information Systems Supervisor at a manufacturing company with 11-50 employees
The most valuable feature is the system's ability to provide information about open CVEs and how it compares the local version with available updates.
IT Manager & Sys Admin at a non-tech company with 51-200 employees
 

Categories and Ranking

JFrog Xray
Ranking in Vulnerability Management
39th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Container Security (14th), Software Composition Analysis (SCA) (5th), Software Supply Chain Security (2nd)
Vicarius vRx
Ranking in Vulnerability Management
15th
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
21
Ranking in other categories
Patch Management (5th), Risk-Based Vulnerability Management (7th)
 

Mindshare comparison

As of March 2026, in the Vulnerability Management category, the mindshare of JFrog Xray is 1.4%, down from 1.6% compared to the previous year. The mindshare of Vicarius vRx is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Vicarius vRx0.9%
JFrog Xray1.4%
Other97.7%
Vulnerability Management
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
OrenBen Shalom - PeerSpot reviewer
Information Security Manager at Pango
Consolidates vulnerability discovery, prioritization, and remediation in a single platform
Vicarius vRx offers several advantages, especially for organizations with diverse operating systems and applications requiring frequent patching. The platform helps prioritize patch installation by identifying high-risk vulnerabilities, allowing IT teams to focus on critical threats first. This prioritization is crucial because it prevents IT teams from being overwhelmed by the constant influx of patches, enabling them to create a manageable plan and allocate resources effectively. By distinguishing between critical, high-risk, and medium-risk vulnerabilities, Vicarius vRx empowers IT teams to address the most urgent threats promptly and schedule less critical patches for later. Both native operating system updates and Vicarius vRx offer vulnerability remediation. Native OS updates allow for the patching of system vulnerabilities on Windows, macOS, and Linux. However, Vicarius vRx provides a single solution for installing both operating system and application updates by also discovering application vulnerabilities. Another valuable feature is virtual patching, which allows us to protect an asset from a specific vulnerability without installing a patch. Sometimes, installing a patch alone is insufficient and requires restarting the asset. However, production servers often cannot be restarted during the day, restricting restarts to specific timeslots. Virtual patching creates a network-based protection layer that prevents exploitation of a vulnerability, offering a temporary safeguard. While not a foolproof solution for long-term use, it's a valuable tool that reduces tension between IT and security teams by providing time to properly install patches.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
11%
Computer Software Company
9%
Government
5%
Computer Software Company
14%
Non Profit
9%
Media Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise7
Large Enterprise3
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What is your experience regarding pricing and costs for Vicarius vRx?
I do not use other solutions, so I cannot compare its pricing to others, but its price seems okay.
What needs improvement with Vicarius vRx?
I would be happy if the patch update could be downloaded to the Vicarius server and then implemented on the client. Currently, they just send a link to the software. For example, if I want to updat...
What is your primary use case for Vicarius vRx?
We use Vicarius vRx to manage all third-party software updates. Previously, we could manage Windows updates, but third-party updates were an issue. It was difficult for us to manage the updates of ...
 

Comparisons

 

Also Known As

JFrog Security Essentials
No data available
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
Information Not Available
Find out what your peers are saying about JFrog Xray vs. Vicarius vRx and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.