Try our new research platform with insights from 80,000+ expert users

JFrog Xray pros and cons

Vendor: JFrog

3.9 out of 5

10 reviews
90% willing to recommend

Pros & Cons summary

JFrog Xray offers powerful reporting functionalities with multiple scanning options and enhances automation to streamline processes. It visualizes the internal dependencies hierarchy and prioritizes vulnerabilities but lacks deeper reporting and customization. Integrating with Artifactory and package support simplifies credential management, though speed, performance, and documentation need improvements. Limitations include PostgreSQL support stability and API usage, which require addressing for improved usability and effectiveness.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

JFrog Xray offers extensive reporting functionalities, including scanning options, making it a valuable tool for automation of processes.

The display of the entire internal dependencies hierarchy is a standout feature of JFrog Xray.

JFrog Xray intelligently prioritizes vulnerabilities, providing guidance on which ones to target first.

The curation capabilities, native integration with Artifactory, and features like scanning for vulnerabilities and license compliance are highly valued.

JFrog's flexibility in supporting multiple packages and technologies, including NuGet, pip, and Terraform, facilitates easy credential management and deployment across cloud and local environments.

CONS

Lacks deeper reporting and the ability to compare data.

APIs have limitations affecting functionality.

Speed could be improved as other solutions offer better performance.

Documentation and error logging require enhancement.

Needs support for more than one database as it currently only supports PostgreSQL.

JFrog Xray Pros review quotes

Sai Pradeep Koneti

DevOps Engineer Intern at University of Nebraska at Omaha

Jun 15, 2021

Good reporting functionalities.

Read full review

reviewer2124318

Lead Vulnerability Analyst/ DevSec Ops Specialist at a government with 201-500 employees

Mar 10, 2023

I would say that this solution has helped our organization by allowing us to automate a lot of the processes.

Read full review

reviewer1646469

Senior Manager at a comms service provider with 5,001-10,000 employees

Mar 15, 2023

The solution is stable and reliable.

Read full review

Free Report: JFrog Xray Reviews and More

Learn what your peers think about JFrog Xray. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,455 professionals have used our research since 2012.

SR IT administrator at Cardinal Integrated Technologies Inc

Mar 31, 2023

The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy.

Read full review

DevOps Engineer at Rambøll Danmark A/S

Jun 1, 2023

If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first.

Read full review

Sai Pradeep Koneti

DevOps Engineer Intern at University of Nebraska at Omaha

Jun 12, 2023

JFrog Xray's reporting feature has a lot of options in it, including scanning.

Read full review

HS

Deployment Coordinator at a government with 10,001+ employees

Feb 21, 2024

JFrog Xray shows us a list of vulnerabilities that can impact our code.

Read full review

VB

Vinod Bhupathiraju

Development Senior at a financial services firm with 5,001-10,000 employees

Nov 19, 2024

The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.

Read full review

DevOps Engineer at Syvora

Aug 21, 2025

With JFrog, we can use this registry from any cloud or work locally as well, and it can support multiple packages such as NuGet, pip, and other technologies including Terraform, making credential management very easy.

Read full review

JFrog Xray Cons review quotes

Sai Pradeep Koneti

DevOps Engineer Intern at University of Nebraska at Omaha

Jun 15, 2021

Lacks deeper reporting, the ability to compare things.

Read full review

reviewer2124318

Lead Vulnerability Analyst/ DevSec Ops Specialist at a government with 201-500 employees

Mar 10, 2023

I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images.

Read full review

reviewer1646469

Senior Manager at a comms service provider with 5,001-10,000 employees

Mar 15, 2023

Since we have been using the solution via APIs, there are some limitations in the APIs.

Read full review

Free Report: JFrog Xray Reviews and More

Learn what your peers think about JFrog Xray. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,455 professionals have used our research since 2012.

SR IT administrator at Cardinal Integrated Technologies Inc

Mar 31, 2023

The speed of JFrog Xray should improve. Other solutions have better performance.

Read full review

DevOps Engineer at Rambøll Danmark A/S

Jun 1, 2023

JFrog Xray does not have a dashboard.

Read full review

Sai Pradeep Koneti

DevOps Engineer Intern at University of Nebraska at Omaha

Jun 12, 2023

JFrog Xray's documentation and error logging could be improved.

Read full review

HS

Deployment Coordinator at a government with 10,001+ employees

Feb 21, 2024

Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool.

Read full review

VB

Vinod Bhupathiraju

Development Senior at a financial services firm with 5,001-10,000 employees

Nov 19, 2024

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.

Read full review

DevOps Engineer at Syvora

Aug 21, 2025

The UI of JFrog Xray could be improved. There is a dialogue box in the Xray section that doesn't always work properly.

Read full review

Related questions

53

How inadvisable is it to use a single vulnerability analysis tool?

28

What are the benefits of continuous scanning for vulnerability management?

29

When evaluating Vulnerability Management, what aspect do you think is the most important to look for?

21

What is a more effective approach to cyber defense: risk-based vulnerability management or vulnerability assessment?

223

What are the main KPIs that need to be implemented to have better posture in vulnerability projects?

99

Which is the best vulnerability scanner tool?

62

What are your recommended automated penetration testing tools?

65

How do you use the MITRE ATT&CK framework for improving enterprise security?

34

Can you recommend API for Tenable Connector into ServiceNow

20

What penetration testing tool (or tools) do you recommend for SMB/SME?