Try our new research platform with insights from 80,000+ expert users

JFrog Xray vs Wiz comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
JFrog Xray improved efficiency, security, and compliance, reduced downtime, and sped up release cycles with enhanced vulnerability detection and reporting.
Sentiment score
4.9
Wiz boosts ROI by enhancing asset management, streamlining compliance, while reducing costs and improving security and efficiency.
We have seen ROI from Wiz and we continued to see value in Wiz.
CyberSecurity Sr Manager at a retailer with 10,001+ employees
We estimate a cost reduction of around 35% to 50%, or even more, due to consolidating our security management into one platform.
CISO at a retailer with 11-50 employees
I have seen a return on investment with Wiz by reducing our budget spent on other tools, saving time, and needing fewer employees.
Senior Program Manager, Security at Eventbrite
 

Customer Service

Sentiment score
4.0
JFrog Xray's customer service is generally well-received, with positive technical support, though not all users engage directly.
Sentiment score
7.4
Wiz customer service is responsive and knowledgeable, rated highly despite initial contact challenges and lacking public documentation.
When we need clarifications, we contact our account manager, and they arrange demos.
Development Senior at a financial services firm with 5,001-10,000 employees
On a scale of 1 to 10, I would rate the technical support of JFrog Xray an eight because they are very knowledgeable.
DevSecOps Engineer at a tech services company with 501-1,000 employees
On a scale from 1 to 10, I would give Wiz's support a 10.
Specialist - Information Security at a tech vendor with 1,001-5,000 employees
The vendor was readily available to assist us over calls, clarifying both technical aspects and theoretical insights.
Cyber Security Engineer at a consultancy with 10,001+ employees
We have also surfaced feature requests or changes, and they have implemented those and rolled those out within a few weeks.
E VP And Chief Information Security Officer at Rate
 

Scalability Issues

Sentiment score
6.8
JFrog Xray is scalable and suitable for multiple applications, despite PostgreSQL limitations and some performance challenges.
Sentiment score
7.7
Wiz is highly rated for its cloud-native scalability and adaptive performance, despite considerations regarding increased pricing at scale.
According to my use case, it is highly scalable.
DevOps Engineer at Syvora
We have deployed Wiz in three organizations on AWS, each with approximately 70 to 80 accounts, totaling more than 120 accounts.
AWS Cloud Security Engineer at a tech services company with 51-200 employees
Scalability-wise, I rate the solution a ten out of ten.
Business Line Manager at S2E
Our environment quadrupled in size. We didn’t have to make any adjustments or configuration changes; it just accommodated the growth.
Principal Engineer at Aviatrix
 

Stability Issues

Sentiment score
7.6
JFrog Xray is praised for stability and security, compared favorably to competitors, with minor concerns about PostgreSQL support.
Sentiment score
7.6
Wiz is highly rated for stability, with minor issues addressed quickly and consistent performance earning user praise.
I use JFrog Xray primarily for security purposes, and I find it reliable.
DevOps Engineer at Syvora
We did experience crashes, downtimes, and performance issues with JFrog Xray.
DevSecOps Engineer at a tech services company with 501-1,000 employees
The stability of Wiz has been good, with no downtime, bugs, or glitches.
Senior Engineering Manager, Data & AI at Omnissa
Stability-wise, I rate the solution an eight to nine out of ten.
Business Line Manager at S2E
The solution is very stable.
Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees
 

Room For Improvement

Users demand better reporting, documentation, UI, site performance, API limits, custom reports, vulnerability management, and integration support.
Users seek improved reporting, integration, security features, and multi-cloud support, highlighting the need for customizable tools and controls.
When we have given a very long tag, it doesn't work as expected and requires excessive scrolling.
DevOps Engineer at Syvora
somehow you need to adapt your GitLab pipeline and turn them into JFrog pipeline, and this is something they don't really advertise at first—you're obliged to use the JFrog CLI.
DevSecOps Engineer at a tech services company with 501-1,000 employees
X-ray needs improvement in supporting more than one database, as it currently only supports PostgreSQL.
Development Senior at a financial services firm with 5,001-10,000 employees
We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.
CyberSecurity Sr Manager at a retailer with 10,001+ employees
One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks.
Principal Engineer at Aviatrix
We need an agent that can be installed, or that can overview all the containers and Kubernetes so that it can detect malicious activities that are happening in them.
SOC Manager at a real estate/law firm with 1,001-5,000 employees
 

Setup Cost

Wiz users have mixed opinions on pricing, balancing perceived value and complexity with advanced features and tool consolidation potential.
JFrog Xray provides a free trial of 14 days.
DevOps Engineer at Syvora
The basic scanning capabilities come with Artifactory, however, curation requires additional licenses.
Development Senior at a financial services firm with 5,001-10,000 employees
We are paying 250k per year.
Project Manager at Hilti
In some cases, it has a very aggressive price, so very cheap.
Business Line Manager at S2E
I don’t think there’s anyone else out there offering the same level, scale, or efficiency.
Principal Engineer at Aviatrix
 

Valuable Features

JFrog Xray offers deep scanning, seamless integration with Artifactory, robust vulnerabilities management, flexible deployment, and attractive pricing.
Wiz enhances risk management with contextual views, automated analysis, seamless integration, and comprehensive cloud visibility, simplifying remediation.
The most valuable features of JFrog Xray are its curation capabilities, its native integration with Artifactory, scanning for vulnerabilities, and license compliance features.
Development Senior at a financial services firm with 5,001-10,000 employees
The policy-driven approach of JFrog Xray helped me maintain security standards by integrating it in the development pipeline.
DevSecOps Engineer at a tech services company with 501-1,000 employees
With other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well.
DevOps Engineer at Syvora
The feature leads to minimal false positives and a low volume of alerts, which is highly valuable for our operations.
Cloud Security Lead at a computer software company with 5,001-10,000 employees
It's highly customizable, allowing us to manage many custom features effectively.
Project Manager at Hilti
Regarding compliance and governance, Wiz streamlines our vulnerability management to meet specific needs effectively.
CISO at a retailer with 11-50 employees
 

Categories and Ranking

JFrog Xray
Ranking in Vulnerability Management
39th
Ranking in Container Security
14th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
10
Ranking in other categories
Software Composition Analysis (SCA) (5th), Software Supply Chain Security (1st)
Wiz
Ranking in Vulnerability Management
1st
Ranking in Container Security
1st
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
35
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (3rd), Cloud Security Posture Management (CSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (1st), Data Security Posture Management (DSPM) (1st), Compliance Management (1st), Cloud Detection and Response (CDR) (1st)
 

Mindshare comparison

As of February 2026, in the Vulnerability Management category, the mindshare of JFrog Xray is 1.4%, down from 1.5% compared to the previous year. The mindshare of Wiz is 6.6%, down from 11.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Wiz6.6%
JFrog Xray1.4%
Other92.0%
Vulnerability Management
 

Featured Reviews

Anand Nanwana - PeerSpot reviewer
DevOps Engineer at Syvora
Offers flexibility across clouds and easy credential management while interface improvements are needed
For JFrog Xray, the Artifactory and package repositories are valuable features. There are many benefits from JFrog Xray. For example, with other registries such as ECR, we can use the images only in the AWS cloud. With JFrog, we can use this registry from any cloud or work locally as well. JFrog can support multiple packages, such as NuGet package, pip, and other technologies. It can be used for Terraform as well. The credential management is very easy in JFrog. For instance, when using GitHub action as a CI/CD tool, I just need to create a token and set up JFrog CLI there and give access to the repository. With multiple repositories, I can generate a token for a specific repository, add that token in the GitHub secret, fetch from the CI/CD, run the command JFrog CLI, and authenticate through the token. Then we can push the images into JFrog.
Marcel Velica - PeerSpot reviewer
Senior Program Manager, Security at Eventbrite
Unified cloud visibility has transformed our risk prioritization and reduced alert fatigue while improving collaboration across security and DevSecOps teams
The standout features of Wiz that make it valuable for me include good multi-cloud environment support, data governance, shadow IT detection, DevSecOps governance, automation, level reporting, threat detection, and good infrastructure detection. Wiz has positively impacted my organization by implementing zero trust authorization, providing good reporting that shows the top attack path, critical assets, overall risk posture, and demonstrating AI and ML workload capabilities towards my team, as well as good infrastructure detection and vulnerability detection accuracy with security posture management at massive scale and identity exposure. There is a massive reduction in risk exposure, immediate visibility across the entire cloud estate, reduced noise and better prioritization, stronger DevSecOps collaboration, continuous compliance instead of ad hoc panic, faster incident response with real context, significant cost savings through tool consolidation, and stronger AI and data governance.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
881,515 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
25%
Manufacturing Company
12%
Computer Software Company
9%
Government
5%
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
9%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise6
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise8
Large Enterprise20
 

Questions from the Community

What do you like most about JFrog Xray?
JFrog Xray shows us a list of vulnerabilities that can impact our code.
What needs improvement with JFrog Xray?
I would assess the integration of JFrog Xray with CI/CD tools as the weak point. You have two means to do that: one is using the API, or the other is using the command line from JFrog. That part is...
What is your primary use case for JFrog Xray?
For JFrog Xray product, you can use it for two main goals: compliance and security. You can use it to check if your licenses are compliant, and you can check if your dependencies you want to use ar...
What do you like most about Wiz?
With Wiz, we get timely alerts for leaked data or any vulnerabilities already existing in our environment.
What is your experience regarding pricing and costs for Wiz?
My experience with pricing, setup cost, and licensing for Wiz was through an RFP where they offered us a good price, and the licensing was a flexible solution based on our business.
What needs improvement with Wiz?
I feel there is a delay in detection, though I am uncertain whether this is due to our implementation disadvantage. Wiz can detect all the issues, threats, and security vulnerabilities, but the del...
 

Comparisons

 

Also Known As

JFrog Security Essentials
No data available
 

Overview

 

Sample Customers

google, amazon, cisco, netflix, oracle, vmware, facebook
Wiz is the fastest growing software company ever - $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever | Wiz Blog  Discover why companies, including Salesforce, Morgan Stanley, Fox, and Bridgewater choose Wiz as their cloud security partner. Read their success stories here: Customers | Wiz
Find out what your peers are saying about JFrog Xray vs. Wiz and other solutions. Updated: January 2026.
881,515 professionals have used our research since 2012.