Docker vs JFrog Xray comparison

Docker and JFrog are both solutions in the Software Supply Chain Security category. Docker is ranked #5 with an average rating of 8.8, while JFrog is ranked #3 with an average rating of 8.0. Additionally, 98% of Docker users are willing to recommend the solution, compared to 100% of JFrog users who would recommend it.

Docker

Read 55 Docker reviews

72 Views
66 Comparison Views

98% willing to recommend

JFrog Xray

Read 8 JFrog Xray reviews

1,100 Views
847 Comparison Views

100% willing to recommend

Docker

JFrog Xray

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Docker and JFrog Xray based on real PeerSpot user reviews.

Find out in this report how the two Software Supply Chain Security solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Docker vs. JFrog Xray Report (Updated: January 2025).

Buyer's Guide

Docker vs. JFrog Xray

January 2025

Download the complete report

Helped 831,997 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Docker

Ranking in Software Supply Chain Security

5th

Average Rating

8.6

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Development Platforms (1st), Container Management (5th)

JFrog Xray

Ranking in Software Supply Chain Security

3rd

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Vulnerability Management (24th), Container Security (20th), Software Composition Analysis (SCA) (6th)

Featured Reviews

Renat Babin

C# Developer at A&D Mortgage LLC

Easy to deploy with an impressive networking feature

The volumes for persistent storage could be more user friendly right out of the box. I would like an option to just use it as local storage or some kind of NSF or CIF. Or to mount the volume straight to a Google Drive or through a particular cloud storage. It's not that these things are impossible, but you have to do some extra work or configurations.

Read full review

Mokshi Pandita

DevOps Engineer at Rambøll Danmark A/S

An intelligent solution that prioritizes which vulnerability to target first in your project

We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Docker allows you to run multiple virtual machines independently."

"The initial setup was easy, and you are only required to run commands."

"It is a quite mature technology."

"The solution's most valuable feature is having containers independent of the operating system or environment."

"Docker is convenient and easy to use."

"The lift and shift creates a lightweight image."

"I am impressed with the product's independence. We can also deploy it anywhere."

"Traditional deployments take more time and builds can be inconsistent across different environments. Docker solves these issues."

More Docker pros

"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."

"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."

"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."

"Good reporting functionalities."

"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."

"JFrog Xray shows us a list of vulnerabilities that can impact our code."

"The solution is stable and reliable."

"JFrog Xray's reporting feature has a lot of options in it, including scanning."

More JFrog Xray pros

Cons

"Management can be improved with the necessary tools for orchestration."

"The solution’s documentation could improve a bit."

"Docker volumes. When I integrated volumes, I faced challenges. I have not essentially used add volumes to the existing instances."

"The stability could be improved."

"We'd like knowledge transfer to be easier."

"There can be challenges with port mapping, however, that's not related to Docker itself."

"The command line interface could be more intuitive. I constantly struggle with it."

"Docker could improve by having security vulnerability reports."

More Docker cons

"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."

"JFrog Xray's documentation and error logging could be improved."

"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."

"Lacks deeper reporting, the ability to compare things."

"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."

"JFrog Xray does not have a dashboard."

"Since we have been using the solution via APIs, there are some limitations in the APIs."

"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."

More JFrog Xray cons

Pricing and Cost Advice

"Docker's price is good."

"Docker is cost-effective and open-source."

"I would rate the pricing of Docker as ten out of ten"

"It's an open-source solution, so it doesn't cost anything"

"Pricing is based on the number of users."

"Customers pay for the license through a yearly subscription model, where they pay per license. This means that the license is based on a subscription, and the customer pays annually for each license they use."

"The product is not expensive."

"The current cost for us is nothing as an open source."

More Docker pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.

See recommendations

831,997 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Insurance Company

11%

Financial Services Firm

Government

Financial Services Firm

25%

Manufacturing Company

13%

Computer Software Company

13%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Docker?

We are using Docker to host applications.

See all answers

What is your experience regarding pricing and costs for Docker?

Our customers buy the software and the prices are available on Docker Hub. The subscription is typically yearly, and customers will need to buy the subscription directly. They can purchase it thems...

See all answers

What needs improvement with Docker?

Docker is a time-tested, proven solution with industry-wide applications. There can be challenges with port mapping, however, that's not related to Docker itself.

See all answers

What do you like most about JFrog Xray?

JFrog Xray shows us a list of vulnerabilities that can impact our code.

See all answers

What needs improvement with JFrog Xray?

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.

See all answers

What is your primary use case for JFrog Xray?

Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...

See all answers

Comparisons

Rancher Labs vs Docker

Compared 23% of the time

VMware Tanzu Platform vs Docker

Compared 23% of the time

Mirantis Container Runtime vs Docker

Compared 17% of the time

Codespaces vs Docker

Compared 11% of the time

HPE Ezmeral Container Platform vs Docker

Compared 3% of the time

More Docker Competitors

Black Duck vs JFrog Xray

Compared 19% of the time

Trivy vs JFrog Xray

Compared 14% of the time

Veracode vs JFrog Xray

Compared 7% of the time

Snyk vs JFrog Xray

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs JFrog Xray

Compared 6% of the time

More JFrog Xray Competitors

Product Reports

Buyer's Guide

Docker

January 2025

Download Docker product report

Buyer's Guide

JFrog Xray

January 2025

Download JFrog Xray product report

Also Known As

No data available

JFrog Security Essentials

Overview

Docker is a versatile container platform used for running and deploying applications in isolated environments, ensuring consistency across development, testing, and production.

Docker offers solutions for containerizing applications, automating deployments, and managing infrastructure through its robust platform. It supports CI/CD workflows, provides a development platform for container management, and simplifies the setup by using streamlined tools. Organizations leverage Docker for building microservices, running UI applications, deploying web services, and setting up secure environments. It also facilitates managing containers via Kubernetes and creating development stacks for enhanced productivity.

What are Docker's key features?

Security: Offers containment and isolation of applications.
Easy Use: Simplifies the deployment and management of applications.
Documentation: Extensive resources to aid in understanding and implementation.
Customization: Flexible environment configurations.
Scalability: Efficiently handles applications irrespective of scale.
Internal DNS: Manages network configurations within the container ecosystem.
Overlay Networks: Facilitates seamless inter-container communication.
Resource Efficiency: Optimizes usage of system resources.

What benefits should users look for?

Consistency: Ensures homogeneous environments across development, testing, and production stages.
Portability: Allows applications to run consistently on any platform.
Cost-Effectiveness: Reduces overhead costs associated with application deployment.
Speed: Accelerates the build, test, and deployment cycles.
Flexibility: Supports various tools and integrations to adapt to different workflows.

Industries implement Docker for CI/CD pipelines, scaling services, and improving resource utilization. Tech companies use Docker for building and deploying their software in isolated environments. Finance and healthcare sectors deploy applications securely, ensuring compliance with regulatory standards. Educational institutions set up consistent development environments for coding labs and training students in advanced technologies.

Docker

JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

If you are a team player and you care and you play to WIN, we have just the job you're looking for.

As we say at JFrog: "Once You Leap Forward You Won't Go Back!"

JFrog

Sample Customers

Information Not Available

google, amazon, cisco, netflix, oracle, vmware, facebook

Buyer's Guide

Docker vs. JFrog Xray

January 2025

Free Report: Docker vs. JFrog Xray

Find out what your peers are saying about Docker vs. JFrog Xray and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,997 professionals have used our research since 2012.

See our Docker vs. JFrog Xray report.

See our list of best Software Supply Chain Security vendors.

We monitor all Software Supply Chain Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.