Find out what your peers are saying about Mend.io, Sonatype, JFrog and others in Software Supply Chain Security.
When we need clarifications, we contact our account manager, and they arrange demos.
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Chainguard is a tool for securing software supply chains, ensuring end-to-end security and trustworthiness of all components in the software development pipeline.
Chainguard integrates seamlessly with existing CI/CD processes, reducing vulnerabilities and enhancing trust in software artifacts. It offers automated compliance checks to help adhere to security policies and regulatory requirements without extra burden. Users appreciate its robust support for compliance and auditing, real-time monitoring, and detailed vulnerability reporting, which together enhance reliability. Feedback indicates areas for improvement in scalability, documentation, customer support response times, and integration capabilities with other software tools. Performance issues during peak usage times have also been noted.
What are the most important features of Chainguard?Chainguard is implemented across various industries that rely on secure software supply chains. Its seamless integration and automated compliance features are particularly beneficial for sectors with stringent regulatory requirements, such as finance, healthcare, and government. Real-time monitoring and vulnerability reporting ensure that these industries maintain high security standards while minimizing manual oversight.
JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].
If you are a team player and you care and you play to WIN, we have just the job you're looking for.
As we say at JFrog: "Once You Leap Forward You Won't Go Back!"
We monitor all Software Supply Chain Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.