Try our new research platform with insights from 80,000+ expert users

Docker vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
56
Ranking in other categories
Development Platforms (1st), Container Management (5th)
JFrog Xray
Ranking in Software Supply Chain Security
1st
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
Vulnerability Management (25th), Container Security (22nd), Software Composition Analysis (SCA) (6th)
 

Mindshare comparison

As of April 2025, in the Software Supply Chain Security category, the mindshare of Docker is 1.2%, up from 1.2% compared to the previous year. The mindshare of JFrog Xray is 19.0%, up from 16.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security
 

Featured Reviews

Rikin Parekh - PeerSpot reviewer
Useful to create sandbox environments to run applications and makes it easy to test them
Overall, setting up the Docker environment is quite easy. Many methods exist, such as using Docker Compose and Docker networks to communicate between containers. The main challenge lies in designing the architecture and integrating different frameworks and microservices. I would rate the ease of setting up the tool at around nine out of ten. The time it takes to deploy depends on the scale of the system. For the early-stage startup I'm currently working with, it doesn't take much time. It's just me handling the deployment. In our early-stage startup, we have a couple of teams with around four to five backend APIs and two front-end services. Deploying these doesn't take much time. My focus is more on minimizing costs due to our lean startup structure.
Mokshi Pandita - PeerSpot reviewer
An intelligent solution that prioritizes which vulnerability to target first in your project
We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use Docker to facilitate deployment, updates, and management."
"It is a very stable solution. Stability-wise, I rate the solution a ten out of ten."
"The most valuable feature is the simple containerization."
"The most valuable features of Docker are its security, detailed documentation, and ease of use, and the Docker Swarm is not as complex as Kubernetes."
"It is a quite mature technology."
"The most valuable feature of Docker is its portability, ease of security management, and low resource usage."
"I am impressed with the product's independence. We can also deploy it anywhere."
"The tool's most valuable feature is its sandbox environment. It makes it very easy to run and test applications without needing configurations, which is the core advantage of containerization. Kubernetes and Helm are helpful as they provide high-level metrics, making tracking the status of all the containers and applications running easier."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"Good reporting functionalities."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
 

Cons

"They should provide proper documentation to understand the solution's cgroup process."
"The volumes for persistent storage could be more user friendly right out of the box."
"I would love to have it available on Linux."
"I have encountered network issues while connecting with microservices. I want to optimize the application layers over the bucket. It should also have better documentation."
"As for improving Docker, I would like to see enhancements in its user interface and documentation to make it even more user-friendly and accessible. I believe Docker will expand its scope and reduce limitations to support more applications, both online and offline. For instance, in scenarios like deployments on ships or during upgrades, Docker can continue to offer software services and container-based intelligence."
"The documentation could be improved."
"Deployment could be quicker."
"Docker could improve by having more advanced features."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"JFrog Xray's documentation and error logging could be improved."
"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"Lacks deeper reporting, the ability to compare things."
"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."
"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."
"JFrog Xray does not have a dashboard."
 

Pricing and Cost Advice

"I would rate the pricing of Docker as ten out of ten"
"Docker is a free open-source solution."
"Pricing is based on the number of users."
"The offering and service are quite free."
"This is an open-source solution, so there are no licensing costs."
"Since Docker is an open-source solution, it is free of cost."
"We are using the open-source version of the solution."
"Docker is open source. To use a Docker enterprise model, we would need to pay for it."
Information not available
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Insurance Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Financial Services Firm
26%
Manufacturing Company
13%
Computer Software Company
12%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Docker?
We are using Docker to host applications.
What needs improvement with Docker?
In terms of communication between services, perhaps the configuration within networks between containers could be improved.
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.
What is your primary use case for JFrog Xray?
Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...
 

Comparisons

 

Also Known As

No data available
JFrog Security Essentials
 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about Docker vs. JFrog Xray and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.