JFrog Xray vs Microsoft Defender for Cloud comparison

JFrog and Microsoft are both solutions in the Vulnerability Management category. JFrog is ranked #24 with an average rating of 8.0, while Microsoft is ranked #7 with an average rating of 8.1. JFrog holds a 1.2% mindshare in VM, compared to Microsoft’s 5.3% mindshare. Additionally, 100% of JFrog users are willing to recommend the solution, compared to 94% of Microsoft users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

JFrog Xray and Microsoft Defender for Cloud are contenders in security vulnerabilities and compliance solutions. Microsoft Defender for Cloud often has the edge due to its comprehensive feature set, which many users feel justifies its higher pricing.

Features: JFrog Xray offers deep binary scanning, continuous integration tool support, and a focus on DevSecOps practices. It excels with package scanning in DevOps pipelines. Microsoft Defender for Cloud provides robust threat protection across hybrid environments, compliance management, and integration with Microsoft services, forming a complete security framework for cloud infrastructures.

Room for Improvement: JFrog Xray could enhance its multi-cloud support, improve its scalability features, and increase adaptability to non-DevOps contexts. Microsoft Defender for Cloud may consider simplifying its deployment process, offering more personalized customer support, and reducing complexity in compliance management configuration.

Ease of Deployment and Customer Service: JFrog Xray is known for its straightforward deployment options and strong customer support tailored to DevOps workflows. Microsoft Defender for Cloud integrates robustly into cloud environments but requires a more complex setup due to comprehensive security features. Its support service complements the offering but is less accessible than JFrog Xray's personalized approach.

Pricing and ROI: JFrog Xray is noted for cost-effective solutions and quick ROI, aided by efficient license models suitable for DevOps. In contrast, Microsoft Defender for Cloud's pricing, which reflects its extensive features, leads to a potentially longer ROI cycle. Many users find the investment justified by the enhanced protection and compatibility with Microsoft ecosystems.

To learn more, read our detailed JFrog Xray vs. Microsoft Defender for Cloud Report (Updated: January 2025).

Buyer's Guide

JFrog Xray vs. Microsoft Defender for Cloud

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of SentinelOne Singularity Cloud Security is 1.4%, up from 0.3% compared to the previous year. The mindshare of JFrog Xray is 1.2%, up from 0.2% compared to the previous year. The mindshare of Microsoft Defender for Cloud is 5.3%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Mokshi Pandita

DevOps Engineer at Rambøll Danmark A/S

An intelligent solution that prioritizes which vulnerability to target first in your project

We could create any number of repositories, but we can create only thirty projects with JFrog Xray. If I want things to work, it has to be one project and multiple repositories that belong to different real projects. So I have a limitation of thirty projects, despite being a premium customer. JFrog Xray does not have a dashboard. Although I am able to generate reports, there is no proper dashboard where I can see the total number of vulnerabilities, the total number of license issues, and how many vulnerabilities are fixed. Second, I found the shift left approach missing with JFrog Xray. JFrog Xray has integration with IDEs, but it does not tell you about the vulnerabilities until the artifact is created. However, Snyk could directly integrate with your repository and would not allow you to build unless you fix the problem.

Read full review

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

A single tool for complete visibility and addressing security gaps

Currently, issues are structured in Microsoft Defender for Cloud at severity levels of high, critical, or warning, but these severity levels are not always right. For example, Microsoft might consider a port being open as critical, but that might not be the case for our company. Similarly, it might suggest closing some management ports, but you might need them to be able to log in, so the severity levels for certain things can be improved. Even though Microsoft Defender for Cloud provides a way to temporarily disable certain alerts or notifications without affecting our security score, it would be better to have more granularized control over these recommendations. Currently, we cannot even disable certain alerts or notifications. There should be an automated mechanism to design Azure policies based on the recommendations, possibly with AI integration. Instead of an engineer having to write a policy to fix security gaps, which is very time-consuming, there should be an inbuilt capability to auto-remediate everything and have proper control in place. Additionally, enabling Defender for Cloud at the resource group level, rather than only at the subscription level, would be beneficial.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's most valuable features are its ability to detect vulnerabilities inside AWS resources and its ability to rescan after a specific duration set by the administrator."

"The most valuable feature of PingSafe is its integration with most of our technology stack, specifically all of our cloud platforms and ticketing software."

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."

"I would definitely recommend SentinelOne Singularity Cloud Security for infrastructure security."

"PingSafe stands out for its user-friendly interface and intuitive software, making it easy to navigate and use."

"SentinelOne Singularity Cloud Security has improved our security posture."

"Cloud Native Security is user-friendly. Everything in the Cloud Native Security tool is straightforward, including detections, integration, reporting, etc. They are constantly improving their UI by adding plugins and other features."

More SentinelOne Singularity Cloud Security pros

"Good reporting functionalities."

"If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first."

"JFrog Xray's reporting feature has a lot of options in it, including scanning."

"The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy."

"JFrog Xray shows us a list of vulnerabilities that can impact our code."

"The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features."

"I would say that this solution has helped our organization by allowing us to automate a lot of the processes."

"The solution is stable and reliable."

More JFrog Xray pros

"The solution is quite good and addresses many security gaps."

"I would like to see more connectors and plugins with other platforms."

"The most valuable features are the monitoring of users, endpoint detection and response, and the adaptability of the AI threat intelligence engine, which quickly adapts to customizations."

"I find Microsoft Defender for Cloud's KQL very flexible and powerful. It's really easy to search through with KQL queries to find the security breaches and incidents and to track down the breach itself."

"The most valuable feature is the recommendations provided on how to improve security."

"Microsoft Defender for Cloud has significantly enhanced our overall security posture by approximately 20 to 25 percent."

"Microsoft Defender for Cloud can find potential phishing links and malicious code in data at rest."

"Defender for Cloud provides a complete DevOps security package for cloud services."

More Microsoft Defender for Cloud pros

Cons

"While SentinelOne offers robust security features, its higher cost may present a challenge for budget-conscious organizations."

"The SentinelOne customer support needs improvement, as they are sometimes late in responding, which is critical in a production issue."

"The area of improvement is the cost, which is high compared to other traditional endpoint protections."

"PingSafe can improve by eliminating 100 percent of the false positives."

"With Cloud Native Security, we can't selectively enable or disable alerts based on our specific use case."

"I want PingSafe to integrate additional third-party resources. For example, PingSafe is compatible with Azure and AWS, but Azure AD isn't integrated with AWS. If PingSafe had that ability, it would enrich the data because how users interact with our AWS environment is crucial. All the identity-related features require improvement."

"While the future roadmap presented by SentinelOne appears promising, I hope the envisioned advancements are realistically achievable and that the gap between current offerings and long-term goals is not too significant."

"Once all components, including the cloud piece and container runtime piece, integrate further and incorporate an AI layer for better comprehension, it will greatly enhance the utility of Singularity Cloud Security."

More SentinelOne Singularity Cloud Security cons

"Lacks deeper reporting, the ability to compare things."

"The out-of-the-box PostgreSQL provided is not stable, which is why we are considering enterprise support."

"X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL."

"JFrog Xray's documentation and error logging could be improved."

"The speed of JFrog Xray should improve. Other solutions have better performance."

"Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool."

"Since we have been using the solution via APIs, there are some limitations in the APIs."

"JFrog Xray does not have a dashboard."

More JFrog Xray cons

"If they had an easier way to display all the vulnerabilities of the machines affected and remediation steps on one screen rather than having to dive deep into each of them, that would be a lot easier."

"No possibility to write or edit any capability."

"Microsoft Defender for Cloud could be improved by adding capabilities for NetApp files and more PaaS resources from other vendors, not just Microsoft."

"I would like to have the ability to customize executive reporting."

"Customizing some of the compliance requirements based on individual needs seems like the biggest area of improvement. There should be an option to turn specific controls on and off based on how your solution is configured."

"Azure Security Center takes a long time to update, compared to the on-premises version of Microsoft Defender."

"As an analyst, there is no way to configure or create a playbook to automate the process of flagging suspicious domains."

"Agent features need to be improved. They support agents through Azure Arc or Workbench. Sometimes, we are not able to get correct signals from the machines on which we have installed these agents. We are not able to see how many are currently reporting to Azure Security Center, and how many are currently not reporting. For example, we have 1,000 machines, and we have enrolled 1,000 OMS agents on these machines to collect the log. When I look at the status, even though at some places, it shows that it is connected, but when I actually go and check, I'm not getting any alerts from those. There are some discrepancies on the agent, and the agent features are not up to the mark."

More Microsoft Defender for Cloud cons

Pricing and Cost Advice

"PingSafe is less expensive than other options."

"SentinelOne offers excellent pricing and licensing options."

"PingSafe is priced reasonably for our workload."

"SentinelOne is quite costly compared to other security platforms."

"The tool is cost-effective."

"While SentinelOne Singularity Cloud Security offers robust protection, its high cost may be prohibitive for small and medium-sized businesses."

"I understand that SentinelOne is a market leader, but the bill we received was astronomical."

"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."

More SentinelOne Singularity Cloud Security pricing and cost advice

Information not available

"The product's pricing policy is generally favorable."

"There are two different plans. We're using the secure basic plan, but we have used the end security plan as well. There are additional costs, but it gives us more functionalities compared to the basic plan."

"Security Center charges $15 per resource for any workload that you onboard into it. They charge per VM or per data-base server or per application. It's not like Microsoft 365 licensing, where there are levels like E3 and E5. Security Center is pretty straightforward."

"There are improvements that have to be made to the licensing. Currently, for servers, it has to be done by grouping the servers on a single subscription... We don't have an option whereby, if all those resources are in one subscription, we can have each of the individual servers subject to different planning."

"They have a free version, but the license for this one isn't too high. It's free to start with, and you're charged for using it beyond 30 days. Some other pieces of Defender are charged based on usage, so you will be charged more for a high volume of transactions. I believe Defender for Cloud is a daily charge based on Azure's App Service Pricing."

"The pricing and licensing of Microsoft Defender for Cloud have been good for us. We appreciate the licensing approach based on employee count rather than a big enterprise license."

"Understanding the costs of cloud services can be complicated at first. As with a lot of things in the cloud, it can be quite hard to understand the end cost, but it becomes clearer over time. Early on, the lack of transparency is a challenge. Microsoft does not tell you the cost when they launch something. It is clever marketing, and there is room for improvement there. There should be clarity from the start."

"Defender's basic version is free, which is good. Many of our teams are evaluating the paid version against third-party products."

More Microsoft Defender for Cloud pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

15%

Manufacturing Company

Government

Financial Services Firm

25%

Manufacturing Company

13%

Computer Software Company

12%

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.

See all answers

What needs improvement with PingSafe?

The areas with room for improvement include the cost, which is higher compared to other security platforms. The dashb...

See all answers

What do you like most about JFrog Xray?

JFrog Xray shows us a list of vulnerabilities that can impact our code.

See all answers

What needs improvement with JFrog Xray?

X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL. More support ...

See all answers

What is your primary use case for JFrog Xray?

Our primary use case for X-ray includes multiple activities such as security and vulnerability scanning. We already u...

See all answers

How is Prisma Cloud vs Azure Security Center for security?

Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...

See all answers

What do you like most about Microsoft Defender for Cloud?

The entire Defender Suite is tightly coupled, integrated, and collaborative.

See all answers

What is your experience regarding pricing and costs for Microsoft Defender for Cloud?

The licensing is straightforward but can become expensive if you cover everything. You must balance the cost against ...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 28% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 23% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 6% of the time

Check Point CloudGuard CNAPP vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Black Duck vs JFrog Xray

Compared 19% of the time

Trivy vs JFrog Xray

Compared 14% of the time

Veracode vs JFrog Xray

Compared 7% of the time

Snyk vs JFrog Xray

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs JFrog Xray

Compared 6% of the time

More JFrog Xray Competitors

AWS GuardDuty vs Microsoft Defender for Cloud

Compared 21% of the time

Prisma Cloud by Palo Alto Networks vs Microsoft Defender for Cloud

Compared 13% of the time

Wiz vs Microsoft Defender for Cloud

Compared 11% of the time

Microsoft Defender XDR vs Microsoft Defender for Cloud

Compared 4% of the time

Azure Firewall vs Microsoft Defender for Cloud

Compared 3% of the time

More Microsoft Defender for Cloud Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

December 2024

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

JFrog Xray

January 2025

Download JFrog Xray product report

Buyer's Guide

Microsoft Defender for Cloud

January 2025

Download Microsoft Defender for Cloud product report

Also Known As

PingSafe

JFrog Security Essentials

Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender

Learn More

SentinelOne

JFrog

Microsoft

Interactive Demo

Demo not available

SentinelOne

Demo not available

JFrog

Microsoft

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

If you are a team player and you care and you play to WIN, we have just the job you're looking for.

As we say at JFrog: "Once You Leap Forward You Won't Go Back!"

Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.

The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.

Sample Customers

Information Not Available

google, amazon, cisco, netflix, oracle, vmware, facebook

Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.

Buyer's Guide

JFrog Xray vs. Microsoft Defender for Cloud

January 2025

Free Report: JFrog Xray vs. Microsoft Defender for Cloud

Find out what your peers are saying about JFrog Xray vs. Microsoft Defender for Cloud and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our JFrog Xray vs. Microsoft Defender for Cloud report.

See our list of best Vulnerability Management vendors and best Container Security vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.