JFrog Xray

Plans and prices

Every plan, in full

On the record

Artifactory integration

Xray integrates with Artifactory and shares metadata to help assess security issues and remediation scope.jfrog.com · read 9 Oct 2026

Availability

JFrog states its SaaS Xray offering has a 99.99% uptime SLA and self-managed deployments can use high availability clusters.jfrog.com · read 9 Oct 2026

CI/CD

Xray can scan CI build information recursively and return vulnerability findings to the calling CI server.docs.jfrog.com · read 9 Oct 2026

Continuous scanning

Xray continuously scans repositories, build packages, and container images throughout the development cycle.jfrog.com · read 9 Oct 2026

Developer tools

Xray offers IDE plugins including for VS Code, IntelliJ, Visual Studio, and PyCharm, and supports CLI scans.jfrog.com · read 9 Oct 2026

Malicious packages

JFrog says Xray uses an extended database of over 4 million open source packages to detect malicious packages and components.jfrog.com · read 9 Oct 2026

Operational risk

Xray can assess operational risk factors such as component age, contributor count, maintenance cadence, commits, and end-of-life status.jfrog.com · read 9 Oct 2026

Plan availability

JFrog states Xray is included with SaaS or self-hosted Pro X, Enterprise X, and Enterprise+ subscriptions.jfrog.com · read 9 Oct 2026

Policy enforcement

Xray policies and watches can flag risky components and trigger alerts or other actions.docs.jfrog.com · read 9 Oct 2026

Purpose

JFrog Xray is an SCA tool for identifying, prioritizing, and remediating vulnerabilities and license compliance issues in open source software and third-party components.jfrog.com · read 9 Oct 2026

SBOM and licenses

Xray generates SBOMs and supports policies and compliance reports for open source licenses.jfrog.com · read 9 Oct 2026

SBOM formats

Xray supports ingesting and exporting SBOMs, including CycloneDX.docs.jfrog.com · read 9 Oct 2026

Supported deployment

Self-hosted Xray can be installed as a single node or high-availability deployment using Helm, Docker Compose, RPM, Debian, or a Linux archive.docs.jfrog.com · read 9 Oct 2026

Supported technologies

Xray supports over 25 package types and technologies, including Docker, Maven, PyPI, npm, and NuGet.jfrog.com · read 9 Oct 2026

Alternatives to JFrog Xray

Q QodanaWebWindows+5 EL Endor LabsWebWindows+5 C CodacyWebBrowser extension KC Kiuwan Code SecurityWebWindows+4 PS PVS-StudioWindowsMac+1 SA Semgrep AppSec PlatformWeb FS Fortify Static Code AnalyzerWindowsLinux+1 SI Snyk IDE PluginsWindowsMac+1

Every alternative, ranked