Try our new research platform with insights from 80,000+ expert users

Docker vs JFrog Xray comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
56
Ranking in other categories
Development Platforms (1st), Container Management (5th)
JFrog Xray
Ranking in Software Supply Chain Security
1st
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
Vulnerability Management (25th), Container Security (22nd), Software Composition Analysis (SCA) (6th)
 

Mindshare comparison

As of April 2025, in the Software Supply Chain Security category, the mindshare of Docker is 1.2%, up from 1.2% compared to the previous year. The mindshare of JFrog Xray is 19.0%, up from 16.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security
 

Featured Reviews

Rikin Parekh - PeerSpot reviewer
Useful to create sandbox environments to run applications and makes it easy to test them
Overall, setting up the Docker environment is quite easy. Many methods exist, such as using Docker Compose and Docker networks to communicate between containers. The main challenge lies in designing the architecture and integrating different frameworks and microservices. I would rate the ease of setting up the tool at around nine out of ten. The time it takes to deploy depends on the scale of the system. For the early-stage startup I'm currently working with, it doesn't take much time. It's just me handling the deployment. In our early-stage startup, we have a couple of teams with around four to five backend APIs and two front-end services. Deploying these doesn't take much time. My focus is more on minimizing costs due to our lean startup structure.
Mokshi Pandita - PeerSpot reviewer
An intelligent solution that prioritizes which vulnerability to target first in your project
We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Docker is very reliable. It's easy to scale, and it's very stable."
"The solution's customer service is good."
"We find the auto scaling and auto healing functionality of this solution very good."
"The most valuable feature of Docker is automation. When I deploy the solution I am confident it will work anywhere. It is reliable and easy to use."
"The solution is easy to deploy for clients so it saves a lot of hassle."
"The solution is easy to install."
"It is neat and very flexible."
"In our line of work, we've been involved in various sectors, such as industrial products, transportation, client engineering, telecom, and medical. For instance, we're currently developing an IT platform. One key use case we're tackling is device management."
"JFrog Xray's reporting feature has a lot of options in it, including scanning."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
"Good reporting functionalities."
"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."
"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."
"JFrog Xray shows us a list of vulnerabilities that can impact our code."
"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."
"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."
 

Cons

"I would like to see a single package image orchestration bundled together."
"We are facing multiple issues with the solution's stability."
"Docker needs to improve its pricing."
"The security layer is very vulnerable, although they are working to improve the system hardening and email hardening."
"Deployment could be quicker."
"I would love to have it available on Linux."
"The product does not have an extensive documentation. The tool does not have good scenarios. We have to go through the GitHub repository and investigate similar scenarios. Also, if you are copying multiple things, then you can jeopardize the copy number. The copying aspect also lacks a UI part. We also need to limit the memory."
"I want to see if new architectures have been incorporated in Docker or if we have to wait for another release."
"JFrog Xray does not have a dashboard."
"Lacks deeper reporting, the ability to compare things."
"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."
"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."
"The speed of JFrog Xray should improve. Other solutions have better performance."
"Since we have been using the solution via APIs, there are some limitations in the APIs."
"I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."
"JFrog Xray's documentation and error logging could be improved."
 

Pricing and Cost Advice

"We use the open-source version."
"Regarding pricing, we primarily use AWS for our deployments since we have funding for it. We don't spend much on Docker-specific services, just the containerization product. Docker Hub isn't particularly expensive either, so overall, the pricing is pretty reasonable."
"It's an open-source solution, so it doesn't cost anything"
"Since Docker is an open-source solution, it is free of cost."
"The offering and service are quite free."
"The solution offers an open-source version that is free and includes a lot of functionality."
"Its convenience edition is free of cost."
"The current cost for us is nothing as an open source."
Information not available
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
845,485 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Insurance Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Financial Services Firm
26%
Manufacturing Company
13%
Computer Software Company
12%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Docker?
We are using Docker to host applications.
What needs improvement with Docker?
In terms of communication between services, perhaps the configuration within networks between containers could be improved.
What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support during troubleshooting sessions would also be beneficial.
What is your primary use case for JFrog Xray?
Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already use Black Duck for these purposes, and we are evaluating how JFrog Xray can offer...
 

Comparisons

 

Also Known As

No data available
JFrog Security Essentials
 

Overview

 

Sample Customers

Information Not Available
google, amazon, cisco, netflix, oracle, vmware, facebook
Find out what your peers are saying about Docker vs. JFrog Xray and other solutions. Updated: March 2025.
845,485 professionals have used our research since 2012.