JFrog Xray

RATING:

4.3

(6)
Overview

About JFrog Xray

Helps users gain confidence in their software releases with a universal DevSecOps software composition analysis solution that scans all of their open source software artifacts and their dependencies for vulnerabilities and license compliance issues. It uses deep recursive scanning techniques to scan repositories, build packages, and container images. Easily integrates Xray across user's software development pipeline and automate protection of their code and prevents unwanted security and license compliance risks entering their production software. Xray empowers DevOps teams to improve developer productivity and efficiency to increase velocity and deliver high-quality software. Xray natively integrates with Artifactory providing automated and continuous scanning of ope...

JFrog Xray Pricing

Free trial: 

Not Available

Free version: 

Not Available

When You Login You Will See a Dashboard Showing your Network Topology
Slide 1 of 5

JFrog Xray Reviews

Overall Rating

4.3

Ratings Breakdown

Secondary Ratings

Ease-of-use

4

Customer Support

5

Value for money

4.5

Functionality

4

Most Helpful Reviews for JFrog Xray

6 Reviews

User Profile

Mo

Verified reviewer

Computer Software, 51-200 employees

Used weekly for less than 12 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

3

VALUE FOR MONEY

4

CUSTOMER SUPPORT

5

FUNCTIONALITY

4

Reviewed November 2022

A good tool for "shift left" security.

PROS

I can easily integrate with Azure DevOps and Jenkins CI and stop the build if a vulnerability is found.

CONS

Reporting can improve with more data and aesthetically

Laura

Health, Wellness and Fitness, 11-50 employees

Used weekly for less than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

3

VALUE FOR MONEY

5

FUNCTIONALITY

4

Reviewed August 2022

Wide range of features

We wanted the ability to write structured instructions for our collegues, who are not trained testers. So everyone in our small company can test our software and provide some feedback. We tried several jira plugins and stayed with XRay as it provides the most useful features for us

PROS

Out of the box XRay provides a lot of features, that brings structure in testing applications. Every test or test execution is directly linked to the Jira issue, providing all neccessary information about the use case.

CONS

The learning curve is pretty steep. Also the software could be better in terms of performance. Sometimes opening a testcase or test execution takes to much time (To be fair: We use it completely within Jira, so I cannot finally say if the performance isssues are because of Jira or XRay)

Reason for choosing JFrog Xray

It was easier to use and to learn

Anonymous

10,000+ employees

Used weekly for less than 2 years

Review Source: Capterra
This review was submitted organically. No incentive was offered

OVERALL RATING:

4

EASE OF USE

4

FUNCTIONALITY

4

Reviewed March 2023

When security in CI/CD is needed

PROS

I really like how it helps to analyze code on the run and suggest multiple enhancements for security and other best practices in code.

CONS

I am not sure about how often are some databases of some security breaches updated, but sometimes there was some time lag. But maybe that was not really a problem on JFrog's site.

Anonymous

1,001-5,000 employees

Used weekly for less than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

4

VALUE FOR MONEY

4

CUSTOMER SUPPORT

5

FUNCTIONALITY

4

Reviewed December 2022

Good CI/CD tool

JFrog's tools are widely used and well-regarded in the software development community, and they are known for their robust feature set and ease of use.

PROS

I love the automated integration with CI/CD pipelines. JFrog can be easily integrated with continuous integration and continuous delivery pipelines, allowing organizations to automate the process of building, testing, and deploying software. It's fast and reliable.

CONS

JFrog can be a little hard to use for newbies. The JFrog tools are feature-rich and offer a wide range of functionality, but this also makes them somewhat complex to use. It may take some time for users to become familiar with all of the features and options available.

User Profile

Manoj

Verified reviewer

Information Technology and Services, 10,000+ employees

Used daily for less than 12 months

Review Source: Capterra
This review was submitted organically. No incentive was offered

OVERALL RATING:

4

EASE OF USE

4

FUNCTIONALITY

4

Reviewed March 2023

Secure your projects in DevOps with JFrog Xray

PROS

Its ability to give real-time security insights on artifacts & the type of artifacts support if available.

CONS

The False Positive analysis that it generates requires a lot of time and effort.

Reasons for switching to JFrog Xray

Its more userfriendly yet powerful.

Naor

Internet, 2-10 employees

Used daily for less than 6 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

5

VALUE FOR MONEY

5

CUSTOMER SUPPORT

5

FUNCTIONALITY

5

Reviewed June 2022

Good product

PROS

It simplicity and ease of use. Very understandable

CONS

To be honest I like the product and have no bad words

6 Reviews