Qodana From $5/mo · Free plan 8.9 Visit 
JFrog Xray
jfrog.com
Spec sheet
- Purpose
- JFrog Xray is an SCA tool for identifying, prioritizing, and remediating vulnerabilities and license compliance issues in open source software and third-party components.Read 9 Oct 2026 · jfrog.com
- Headquarters
- Netanya, IsraelRead 28 Sep 2026 · jfrog.com
- Founded
- 2008Read 28 Sep 2026 · jfrog.com
- Artifactory integration
- Xray integrates with Artifactory and shares metadata to help assess security issues and remediation scope.Read 9 Oct 2026 · jfrog.com
- Availability
- JFrog states its SaaS Xray offering has a 99.99% uptime SLA and self-managed deployments can use high availability clusters.Read 9 Oct 2026 · jfrog.com
- CI/CD
- Xray can scan CI build information recursively and return vulnerability findings to the calling CI server.Read 9 Oct 2026 · docs.jfrog.com
- Continuous scanning
- Xray continuously scans repositories, build packages, and container images throughout the development cycle.Read 9 Oct 2026 · jfrog.com
- Developer tools
- Xray offers IDE plugins including for VS Code, IntelliJ, Visual Studio, and PyCharm, and supports CLI scans.Read 9 Oct 2026 · jfrog.com
- Malicious packages
- JFrog says Xray uses an extended database of over 4 million open source packages to detect malicious packages and components.Read 9 Oct 2026 · jfrog.com
- Operational risk
- Xray can assess operational risk factors such as component age, contributor count, maintenance cadence, commits, and end-of-life status.Read 9 Oct 2026 · jfrog.com
- Plan availability
- JFrog states Xray is included with SaaS or self-hosted Pro X, Enterprise X, and Enterprise+ subscriptions.Read 9 Oct 2026 · jfrog.com
- Policy enforcement
- Xray policies and watches can flag risky components and trigger alerts or other actions.Read 9 Oct 2026 · docs.jfrog.com
- SBOM and licenses
- Xray generates SBOMs and supports policies and compliance reports for open source licenses.Read 9 Oct 2026 · jfrog.com
- SBOM formats
- Xray supports ingesting and exporting SBOMs, including CycloneDX.Read 9 Oct 2026 · docs.jfrog.com
- Supported deployment
- Self-hosted Xray can be installed as a single node or high-availability deployment using Helm, Docker Compose, RPM, Debian, or a Linux archive.Read 9 Oct 2026 · docs.jfrog.com
- Supported technologies
- Xray supports over 25 package types and technologies, including Docker, Maven, PyPI, npm, and NuGet.Read 9 Oct 2026 · jfrog.com
Plans and prices
Enterprise X (SaaS) $950 a month Starting at: $950 / Month 125 GB base monthly consumption · 30 projects · 99.9% uptime · 24/7 SLA Support Read 9 Oct 2026 · jfrog.com
Pro X (self-hosted) $27,000 a year Starting at $27,000 / Year 1 Server · 24/7 SLA Support Read 9 Oct 2026 · jfrog.com
Enterprise X (self-hosted) $51,000 a year Starting at: $51,000 / Year 3 Servers · 30 projects · 24/7 SLA Support Read 9 Oct 2026 · jfrog.com
Enterprise+ Priced on request Custom Pricing: Let's Talk SaaS: custom consumption · Self-hosted: 6 servers · High Touch Support Read 9 Oct 2026 · jfrog.com
Where Specifiction places it
- IDE Code Security Plugins#5 of 197.8
- Software Composition Analysis Software#32 of 657.8
- Dependency Management Software#15 of 277.8
Alternatives to JFrog XrayAll alternatives →
Qodana From $5/mo · Free plan 8.9 Visit 
Endor Labs Free plan 8.8 Visit 
Codacy From $1.50/mo · Free plan 8.4 Visit 
Kiuwan Code Security From $4.08/mo 8.2 Visit 
PVS-Studio 7.5 Visit