Try our new research platform with insights from 80,000+ expert users

Docker vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
5th
Average Rating
8.6
Number of Reviews
54
Ranking in other categories
Development Platforms (1st), Container Management (6th)
JFrog Xray
Ranking in Software Supply Chain Security
3rd
Average Rating
8.2
Number of Reviews
7
Ranking in other categories
Vulnerability Management (22nd), Container Security (19th), Software Composition Analysis (SCA) (6th)
 

Featured Reviews

Gur Sannikov - PeerSpot reviewer
May 28, 2024
Offers reliability and helps to save on costs
In terms of the impact of container orchestration, I would say that though my company does not currently use a lot of containers, we plan to move to containers. I recommend others to just use the internet than ChatGPT since mostly all issues are already known and very easy to deal with so it is better to use the knowledge from the industry. In terms of the use of Docker for AI projects or workflows, I would say that my company deploys AI applications on Docker, like any other application and pipeline. The tools or practices that have proven to be the most beneficial for our company's AI initiatives are agnostic to Docker. There is nothing special in Docker, and our company just uses it to deploy applications. The value derived from the use of the product revolves around the scalability and the reliability it offers. The product helps with the cost-savings part since it saves time and money linked with the amount of engineers required to spend time on operations. I rate the solution a nine out of ten.
Mokshi Pandita - PeerSpot reviewer
Jun 1, 2023
An intelligent solution that prioritizes which vulnerability to target first in your project
We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's most valuable feature is its sandbox environment. It makes it very easy to run and test applications without needing configurations, which is the core advantage of containerization. Kubernetes and Helm are helpful as they provide high-level metrics, making tracking the status of all the containers and applications running easier."
"The initial setup was easy, and you are only required to run commands."
"The most valuable feature of Docker is automation. When I deploy the solution I am confident it will work anywhere. It is reliable and easy to use."
"The most valuable feature of Docker is that it revolutionized virtualization by providing a new approach with containers that completely nullified the time it used to take to deploy applications on virtual servers, resulting in deployment times that can be as quick as milliseconds, unless it is a heavy application, such as Java. Additionally, resource utilization has greatly improved with Docker, allowing for more resources to be allocated to other tasks. These are a few key features that make Docker a preferred choice."
"I have seen end-to-end performance with Docker. It's a great tool, and it's the most popular container service in the market."
"Containerization is the most valuable feature. I can communicate to the Docker containers using other containers."
"The most valuable feature of Docker is the dedicated QA environment for connecting the team members. Additionally, there are many core features available and it is highly secure when we are imaging a client's server."
"The tool helps us in code versioning. I think it's pretty much easy to use and very straightforward. Even if someone is new to the tool, they can easily start using it with a little guidance or theoretical knowledge. Go through the tool and start using it without much struggle."
"The solution is stable and reliable."
"Good reporting functionalities."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
 

Cons

"Docker could improve by having security vulnerability reports."
"We have found that it is not easy to install it into a Windows system."
"Unfortunately, base images are not currently available."
"The product does not have an extensive documentation. The tool does not have good scenarios. We have to go through the GitHub repository and investigate similar scenarios. Also, if you are copying multiple things, then you can jeopardize the copy number. The copying aspect also lacks a UI part. We also need to limit the memory."
"The Kubernetes blocks need improvement since Docker has many holes in it."
"Docker needs to improve its pricing."
"The volumes for persistent storage could be more user friendly right out of the box."
"There may not be much room for improvement with Docker as it has greatly evolved. However, one area that could be improved upon is the documentation on their website which was once easy to follow but has become quite terrible with numerous versions being released. As an example, the installation process for Docker now requires more than just a one-line command, causing inconvenience. Additionally, based on my experience as a college instructor, teaching students to install Docker was a difficult task due to the lack of straightforward and easy-to-follow documentation. Docker should focus on improving their documentation to make it more user-friendly for all."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"JFrog Xray's documentation and error logging could be improved."
"JFrog Xray does not have a dashboard."
"Lacks deeper reporting, the ability to compare things."
 

Pricing and Cost Advice

"Docker is a free open-source solution."
"The product is a free open-source tool."
"It's an open-source solution, so it doesn't cost anything"
"The offering and service are quite free."
"There is a license needed to use Docker."
"This is an open-source solution, so there are no licensing costs."
"Its convenience edition is free of cost."
"Since Docker is an open-source solution, it is free of cost."
Information not available
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
813,418 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Insurance Company
11%
Financial Services Firm
10%
Manufacturing Company
8%
Financial Services Firm
24%
Manufacturing Company
15%
Computer Software Company
13%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Docker?
We are using Docker to host applications.
What is your experience regarding pricing and costs for Docker?
Our customers buy the software and the prices are available on Docker Hub. The subscription is typically yearly, and customers will need to buy the subscription directly. They can purchase it thems...
What needs improvement with Docker?
There's always room for improvement. Sometimes there's a bug or defect in the solution. However, the Docker team works on fixing it.
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
There is a tool called DefectDojo for reporting. Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefor...
What is your primary use case for JFrog Xray?
We use this solution to identify vulnerabilities in the dependency file. We have the Artifactory package which integrates with Xray-like plugins. We can automatically plug this tool into Xray to co...
 

Comparisons

 

Also Known As

No data available
JFrog Security Essentials
 

Learn More

 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about Docker vs. JFrog Xray and other solutions. Updated: September 2024.
813,418 professionals have used our research since 2012.