

FortiCNAPP and JFrog Xray compete in cloud application protection and software supply chain security. JFrog Xray seems to have an upper hand due to its advanced features despite its higher costs.
Features: FortiCNAPP offers advanced threat detection, automated response capabilities, and robust application security. It leverages security fabrics for better enforcement and integrates with SIEM solutions for enhanced visibility. JFrog Xray provides comprehensive vulnerability analysis, continuous monitoring of software components, and extensive integration capabilities for broad protection scope.
Room for Improvement: FortiCNAPP can enhance its user interface and integration with third-party tools. It may improve reporting capabilities and provide more detailed analytics. Improving scalability options can foster broader adoption. JFrog Xray could benefit from reducing complexity in setup, enhancing speed in large-scale environments, and refining alert accuracy to minimize false positives.
Ease of Deployment and Customer Service: FortiCNAPP is known for easy deployment and responsive customer service, facilitating smooth implementation. JFrog Xray offers efficient deployment too but distinguishes itself with extensive documentation and technical support, providing reassurance in complex environments.
Pricing and ROI: FortiCNAPP is favored for its competitive pricing and immediate ROI, making it attractive for budget-conscious organizations. JFrog Xray, while having higher initial costs, offers a high ROI through robust performance analytics and long-term security benefits, justifying the investment for organizations seeking extensive security coverage.
FortiCNAPP is a competitive and robust solution, the only one in the IT sphere that addresses all quadrants in the Gartner Quadrants.
Fortinet's technical support is definitely helpful and responsive.
My technical teams do utilize integration with DevOps tools, as it performs significantly with automation regarding sophisticated challenges.
Technical support from Fortinet is good; I get feedback and responses quickly.
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
When we need clarifications, we contact our account manager, and they arrange demos.
For complex large customers, global deployments, or large public sector customers, the process can take longer.
According to my use case, it is highly scalable.
They respond within the service level agreements and are proactive in their approach.
I use JFrog Xray primarily for security purposes, and I find it reliable.
We did experience crashes, downtimes, and performance issues with JFrog Xray.
The vulnerability part is not systematically organized; it is all clumsy in the web UI, and it is not user-friendly.
The solution could be more user-friendly and intuitive.
Policy implementation is quite complex, and the stability will take more time for the solutions.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
The pricing is a mediator compared to other products; it is not that much higher and not much lower than other products, making it a very affordable price.
JFrog Xray provides a free trial of 14 days.
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
It functions as a proactive tool, enabling me to identify threats quickly and automate responses.
The machine learning capability in Lacework FortiCNAPP is used for threat detection.
FortiCNAPP definitely brings time-saving benefits.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
| Product | Mindshare (%) |
|---|---|
| FortiCNAPP | 1.8% |
| JFrog Xray | 1.4% |
| Other | 96.8% |


| Company Size | Count |
|---|---|
| Small Business | 6 |
| Midsize Enterprise | 4 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 1 |
| Midsize Enterprise | 3 |
| Large Enterprise | 6 |
FortiCNAPP is a comprehensive cloud security platform focusing on ease of use and machine learning-driven anomaly detection. It offers robust compliance reporting, seamless integration, and continuous monitoring, making it an essential tool for organizations managing multi-cloud environments and security configurations.
FortiCNAPP provides significant capabilities in cloud security, compliance, and vulnerability management. Designed for organizations needing efficient monitoring, it enables detection of anomalies across cloud infrastructures while optimizing security posture and ensuring compliance with environments like AWS and GCP. The platform offers in-depth insights through scanning of IAC scripts, host systems, and cloud configurations. Recognized for effectively managing security posture, it safeguards Kubernetes and container environments, providing comprehensive threat detection and response. However, some areas like visibility, IAM security controls, and compliance metrics need improvement. Users face challenges with alert setup and lack intuitive design, alongside issues like FedRAMP authorization absence and complexity in the data model.
What are the key features of FortiCNAPP?FortiCNAPP is implemented extensively by industries needing reliable cloud security, such as finance, healthcare, and technology sectors. It supports organizations in enhancing cloud infrastructure protection, ensuring compliance, and strengthening vulnerability management. By integrating with platforms like AWS and GCP, businesses can optimize security posture in their cloud deployments.
JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].
If you are a team player and you care and you play to WIN, we have just the job you're looking for.
As we say at JFrog: "Once You Leap Forward You Won't Go Back!"
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.