JFrog Xray vs Snyk comparison

Read 48 Snyk reviews

5,710 Views
936 Comparison Views

100% willing to recommend

JFrog Xray

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 4, 2025

Snyk and JFrog Xray are competing products in the software security and vulnerability management category, with Snyk having an advantage in pricing and customer support, while JFrog Xray stands out with its robust features, making it a preferred choice by some as a superior product.

Features: Snyk offers seamless integration with development tools, automated vulnerability fixes, and self-service features with ease of use. JFrog Xray provides in-depth artifact analysis, broad ecosystem support, and native integration with Artifactory for a comprehensive approach to security management.

Room for Improvement: Snyk could expand its vulnerability database for broader coverage and improve flexibility for custom use cases. JFrog Xray could enhance its ease of deployment and offer simpler initial setup procedures to improve user experience, as well as provide more intuitive user interfaces.

Ease of Deployment and Customer Service: Snyk’s cloud-based deployment ensures a quick setup process with responsive customer support. JFrog Xray’s complex deployment options, which include both cloud and on-premises, come with thorough documentation and strong support channels, suited for enterprise needs.

Pricing and ROI: Snyk is often favored for its competitive pricing and strong ROI through effective vulnerability management. Despite higher initial costs, JFrog Xray offers significant ROI supported by its extensive functionality and broad integration capabilities, which may align better with large enterprises needing comprehensive security solutions.

To learn more, read our detailed JFrog Xray vs. Snyk Report (Updated: June 2025).

JFrog Xray vs. Snyk

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

5.9

JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.

Sentiment score

6.7

Users praise Snyk for efficient vulnerability identification, enhancing security, saving developer time, and improving early-stage development cost-efficiency.

No quotes available

For more quotes and insights, download the JFrog Xray report

No quotes available

For more quotes and insights, download the Snyk report

Customer Service

Sentiment score

3.8

JFrog Xray's customer service receives mixed reviews, with varying satisfaction in support response times and account manager interactions.

Sentiment score

7.5

Snyk's support is responsive and effective, praised for direct engineer access, engagement, and comprehensive assistance with minor improvement areas.

When we need clarifications, we contact our account manager, and they arrange demos.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

Their response time aligns with their SLA commitments.

Information Security Strategy at a insurance company with 10,001+ employees

Our long-standing association has ensured smooth communication, resulting in favorable support experiences and satisfactory issue resolution.

For more quotes and insights, download the Snyk report

CEO at a computer software company with 10,001+ employees

Scalability Issues

Sentiment score

7.4

JFrog Xray is viewed as scalable, accommodating growth plans, despite some PostgreSQL constraints, and rates scalability 7-8/10.

Sentiment score

7.3

Snyk is scalable, integrates with cloud services, scans quickly, and is preferred over on-prem for large deployments.

No quotes available

For more quotes and insights, download the JFrog Xray report

Snyk allows for scaling across large organizations, accommodating tens of thousands of applications and over 60,000 repositories.

For more quotes and insights, download the Snyk report

CEO at a computer software company with 10,001+ employees

Stability Issues

Sentiment score

7.7

JFrog Xray is praised for stability and performance, though its provided PostgreSQL is considered unstable, needing enterprise support.

Sentiment score

7.8

Snyk is stable with responsive support, though users face minor integration challenges and isolated performance issues in large projects.

No quotes available

For more quotes and insights, download the JFrog Xray report

No quotes available

For more quotes and insights, download the Snyk report

Room For Improvement

JFrog Xray needs improvements in documentation, UI, reporting, performance, vulnerability management, integration, APIs, and troubleshooting support.

Snyk users seek reduced false positives, improved integration, more languages, enhanced AI, better UI, and faster API responses.

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

It lacks the ability to select branches on its Web UI, forcing users to rely on CLI or CI/CD for that functionality.

CEO at a computer software company with 10,001+ employees

The inclusion of AI to remove false positives would be beneficial.

PawanSingh2

Director at Marsh

As we are moving toward GenAI, we expect Snyk to leverage AI features to improve code scanning findings.

For more quotes and insights, download the Snyk report

Information Security Strategy at a insurance company with 10,001+ employees

Setup Cost

Snyk offers scalable, user-based pricing seen as expensive but valuable, with negotiable packages for enterprise cloud deployments.

The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

After negotiations, we received a special package with a good price point.

Information Security Strategy at a insurance company with 10,001+ employees

Snyk is recognized as the cheapest option we have evaluated.

For more quotes and insights, download the Snyk report

CEO at a computer software company with 10,001+ employees

Valuable Features

JFrog Xray efficiently blocks vulnerabilities with policy watches, integrates with Artifactory, and excels in scanning and license compliance.

Snyk offers comprehensive security with seamless integration, automation, and developer-friendly tools, enhancing risk management and usability.

The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.

For more quotes and insights, download the JFrog Xray report

Development Senior at a financial services firm with 5,001-10,000 employees

Snyk helps detect vulnerabilities before code moves to production, allowing for integration with DevOps and providing a shift-left advantage by identifying and fixing bugs before deployment.

PawanSingh2

Director at Marsh

Our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

CEO at a computer software company with 10,001+ employees

The best feature of Snyk is the integration with our ticketing system, which is Jira.

For more quotes and insights, download the Snyk report

Information Security Strategy at a insurance company with 10,001+ employees

Categories and Ranking

JFrog Xray

Ranking in Container Security

20th

Ranking in Software Composition Analysis (SCA)

6th

Average Rating

8.0

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Vulnerability Management (32nd), Software Supply Chain Security (2nd)

Snyk

Ranking in Container Security

5th

Ranking in Software Composition Analysis (SCA)

2nd

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Static Application Security Testing (SAST) (8th), Cloud Management (14th), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), DevSecOps (2nd), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of July 2025, in the Container Security category, the mindshare of JFrog Xray is 3.9%, up from 2.3% compared to the previous year. The mindshare of Snyk is 5.5%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security

Featured Reviews

Mokshi Pandita

DevOps Engineer at Rambøll Danmark A/S

An intelligent solution that prioritizes which vulnerability to target first in your project

We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Read full review

Affordable tool boosts code scanning efficiency but faces integration hurdles

CEO at a computer software company with 10,001+ employees

The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

25%

Computer Software Company

12%

Manufacturing Company

12%

Government

Financial Services Firm

16%

Computer Software Company

14%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about JFrog Xray?

JFrog Xray shows us a list of vulnerabilities that can impact our code.

What needs improvement with JFrog Xray?

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.

What is your primary use case for JFrog Xray?

Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What do you like most about Snyk?

The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

Prisma Cloud by Palo Alto Networks vs JFrog Xray

Comparisons

Black Duck vs JFrog Xray

Compared 14% of the time

Trivy vs JFrog Xray

Compared 14% of the time

Veracode vs JFrog Xray

Compared 7% of the time

Compared 6% of the time

Checkmarx Software Composition Analysis vs JFrog Xray

Compared 4% of the time

More JFrog Xray Competitors

GitHub Advanced Security vs Snyk

Compared 11% of the time

Trivy vs Snyk

Compared 9% of the time

SonarQube Server (formerly SonarQube) vs Snyk

Compared 8% of the time

Wiz vs Snyk

Compared 7% of the time

Prisma Cloud by Palo Alto Networks vs Snyk

Compared 2% of the time

More Snyk Competitors

Product Reports

JFrog Xray

Download JFrog Xray product report

Download Snyk product report

Also Known As

JFrog Security Essentials

Fugue

Overview

JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

If you are a team player and you care and you play to WIN, we have just the job you're looking for.

As we say at JFrog: "Once You Leap Forward You Won't Go Back!"

JFrog

Snyk's AI Trust Platform empowers developers to innovate securely in AI-driven environments, ensuring rapid and secure software development with enhanced policy governance.

Snyk’s platform integrates AI-ready engines across the software development lifecycle, offering broad coverage with high speed and accuracy essential for fast-paced coding environments. AI-driven features include visibility, prioritization, and tailored security policies that enable proactive threat prevention and quick remediation. By focusing on LLM engineering and AI code analysis, Snyk supports secure and productive development processes. The platform's partnerships, including GenAI code assistants, enhance AI application security by addressing new threats and code velocity challenges.

What are the key features of Snyk?

Easy Integration: Snyk integrates with CI/CD pipelines, GitHub, and JIRA for seamless security management.
Multilingual Support: It offers extensive programming language support, enhancing project compatibility.
Actionable Insights: Provides accurate vulnerability detection with actionable remediation guidance.
Cloud and Container Security: Offers comprehensive checks for cloud and container environments, improving security posture.
Automation & Notifications: Automates vulnerability alerts and notifications for early threat identification in development.

What benefits should users consider in reviews?

Time Efficiency: Speeds up development by identifying and fixing vulnerabilities early in the software lifecycle.
Risk Reduction: Minimizes security risks with extensive vulnerability scanning and proactive alerting.
Productivity Boost: Enhances productivity by integrating security directly into developers' workflows.
Improved Compliance: Aids in maintaining license compliance and managing open-source dependencies effectively.

Snyk is implemented across industries focusing on agile development and DevSecOps, enhancing software delivery speed and security. It is widely used for continuous monitoring and adherence to security and licensing standards, especially in environments relying on Docker image security and CI/CD pipeline integration.

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief

JFrog Xray vs. Snyk