Try our new research platform with insights from 80,000+ expert users

FortiCNAPP vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
FortiCNAPP offers significant ROI through cost-effectiveness, automation, team optimization, and compelling security enhancements without additional staffing needs.
Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
FortiCNAPP is a competitive and robust solution, the only one in the IT sphere that addresses all quadrants in the Gartner Quadrants.
Client Manager at MLL Telecom Ltd
 

Customer Service

Sentiment score
7.9
FortiCNAPP's customer service is proactive, quick, and integrates well with DevOps tools, providing satisfactory and reliable support.
Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Fortinet's technical support is definitely helpful and responsive.
Owner at IT CARE
My technical teams do utilize integration with DevOps tools, as it performs significantly with automation regarding sophisticated challenges.
Client Manager at MLL Telecom Ltd
Technical support from Fortinet is good; I get feedback and responses quickly.
Software Engineer at a university with 5,001-10,000 employees
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Scalability Issues

Sentiment score
6.7
FortiCNAPP is scalable and performs well in complex environments, though some users note potential challenges under heavy traffic.
Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
For complex large customers, global deployments, or large public sector customers, the process can take longer.
Client Manager at MLL Telecom Ltd
According to my use case, it is highly scalable.
DevOps Engineer at Syvora
 

Stability Issues

Sentiment score
7.5
FortiCNAPP is stable and reliable, despite minor lags, with strong support but needs better detection and data accuracy.
Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
They respond within the service level agreements and are proactive in their approach.
Client Manager at MLL Telecom Ltd
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
 

Room For Improvement

FortiCNAPP requires enhanced third-party integrations, user interface improvements, better policy implementation, scalability, and FedRAMP authorization for effective use.
Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly.
Software Engineer at a university with 5,001-10,000 employees
The solution could be more user-friendly and intuitive.
Client Manager at MLL Telecom Ltd
Policy implementation is quite complex, and the stability will take more time for the solutions.
Owner at IT CARE
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Setup Cost

FortiCNAPP is costly but competitive, improving in affordability and flexibility, especially for early adopters despite high fees.
The pricing is a mediator compared to other products; it is not that much higher and not much lower than other products, making it a very affordable price.
Owner at IT CARE
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
 

Valuable Features

FortiCNAPP enhances cloud security with compliance reports, anomaly detection, and 24/7 monitoring, offering seamless SIEM integration and vulnerability management.
JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
It functions as a proactive tool, enabling me to identify threats quickly and automate responses.
Client Manager at MLL Telecom Ltd
The machine learning capability in Lacework FortiCNAPP is used for threat detection.
Software Engineer at a university with 5,001-10,000 employees
FortiCNAPP definitely brings time-saving benefits.
Owner at IT CARE
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
 

Categories and Ranking

FortiCNAPP
Ranking in Vulnerability Management
35th
Ranking in Container Security
28th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
13
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (17th), Cloud Security Posture Management (CSPM) (22nd), Cloud-Native Application Protection Platforms (CNAPP) (16th), Compliance Management (10th)
JFrog Xray
Ranking in Vulnerability Management
39th
Ranking in Container Security
14th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Software Composition Analysis (SCA) (5th), Software Supply Chain Security (2nd)
 

Mindshare comparison

As of March 2026, in the Vulnerability Management category, the mindshare of FortiCNAPP is 1.8%, up from 1.3% compared to the previous year. The mindshare of JFrog Xray is 1.4%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
FortiCNAPP1.8%
JFrog Xray1.4%
Other96.8%
Vulnerability Management
 

Featured Reviews

Mark Freeborough - PeerSpot reviewer
Client Manager at MLL Telecom Ltd
Network segmentation has strengthened access control and now streamlines automated threat response
The most valuable features in FortiCNAPP include robust network segmentation and restricting access to network assets. It also supports security measures by leveraging security fabrics for better enforcement and policy enforcement. FortiCNAPP integrates with SIEM solutions, and we offer different SIEM options that work with Fortinet and AlienVault, among others, providing multiple scenarios.FortiCNAPP's automated policy recommendations significantly help improve security measures as part of an overall service wrap. When deploying a Fortinet SD-WAN or network, these tools provide greater visibility to vulnerabilities and enhanced security on the network. It functions as a proactive tool, enabling me to identify threats quickly and automate responses.
Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
7%
University
6%
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
9%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Lacework?
My smaller deployments cost around 200,000 a year, which is probably not as expensive as Wiz.
What needs improvement with Lacework?
FortiCNAPP performs well in terms of threat notification and response times. However, the solution could be more user-friendly and intuitive. When managing the platform, navigating to certain detai...
What is your primary use case for Lacework?
FortiCNAPP is typically used for network access control. The standard use cases for FortiCNAPP center around reporting and automated responses, particularly in IoT environments and workflow automat...
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
 

Comparisons

 

Also Known As

Polygraph, FortiCNP, Lacework
JFrog Security Essentials
 

Overview

 

Sample Customers

J.Crew, AdRoll, Snowflake, VMWare, Iterable, Pure Storage, TrueCar, NerdWallet, and more.
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about FortiCNAPP vs. JFrog Xray and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.