Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

GrypeJFrog Xray2 of 3 products

Side-by-side comparison of Grype, JFrog Xray
Product	Grype by Anchore View product	JFrog Xray by JFrog View product
Overview
What it is	Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.	JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.
Product type	Open Source Vulnerability Scanner	Deep Binary Vulnerability & License Scanner
Best for	Technology, Cross-industry, Open Source Community	Software Teams, DevSecOps
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	Cloud	SaaSCloudHybrid
Deployment details	Command-line tool (local); CI/CD; Command-line tool	Software; Cloud (SaaS); Hybrid; Software; Cloud SaaS; Hybrid
Data residency	Local (runs on user machine)	US; EU; Global
Key features
What it offers	Container image scanning File system and archive scanning SBOM input from Syft OS and language package support Auto-updating vulnerability database SARIF, JSON and CycloneDX output Severity-based build gates Container vulnerability scanning	Deep binary vulnerability scanning Open-source license compliance Automated SBOM generation Component graphs SCA Software Supply Chain Security Container Security SBOM
Platform & access
API access	API access: no	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: no	RBAC: yes
Multi-tenant	Multi-tenant: no	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	LinuxmacOSWindowsDocker	JFrog ArtifactoryIDE PluginsJenkinsGitLabJiraDockerKubernetes
Compliance		SOC 2 Type IIISO 27001FedRAMPGDPR
Integrations & coverage
Integrations	SyftDockerPodmanGitHub ActionsGitLab CIJenkinsAnchore Enterprise	JFrog ArtifactoryIDEsCI/CDGit
Industries	TechnologyCross-industryOpen Source Community	Software TeamsDevSecOps
Regions	Global	GlobalUSEU
Vendor
Company	Anchore	JFrog
Headquarters	Santa Barbara, California, USA	Sunnyvale, California, USA
Company size	51-200	1,500+
Founded	2016	2008

Grype

by Anchore

View product

JFrog Xray

by JFrog

View product

Overview

What it is

Grype

Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.

JFrog Xray

JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.

Product type

Grype

Open Source Vulnerability Scanner

JFrog Xray

Deep Binary Vulnerability & License Scanner

Best for

Grype

Technology, Cross-industry, Open Source Community

JFrog Xray

Software Teams, DevSecOps

Pricing

Pricing model

Grype

Contact Vendor

JFrog Xray

Contact Vendor

Free trial

Grype

JFrog Xray

Deployment

Deployment options

Grype

Cloud

JFrog Xray

SaaSCloudHybrid

Deployment details

Grype

Command-line tool (local); CI/CD; Command-line tool

JFrog Xray

Software; Cloud (SaaS); Hybrid; Software; Cloud SaaS; Hybrid

Data residency

Grype

Local (runs on user machine)

JFrog Xray

US; EU; Global

Key features

What it offers

Grype

Container image scanning
File system and archive scanning
SBOM input from Syft
OS and language package support
Auto-updating vulnerability database
SARIF, JSON and CycloneDX output
Severity-based build gates
Container vulnerability scanning

JFrog Xray

Deep binary vulnerability scanning
Open-source license compliance
Automated SBOM generation
Component graphs
SCA
Software Supply Chain Security
Container Security
SBOM

Platform & access

API access

Grype

JFrog Xray

Single sign-on (SSO)

Grype

JFrog Xray

Role-based access (RBAC)

Grype

JFrog Xray

Multi-tenant

Grype

JFrog Xray

Mobile app

Grype

JFrog Xray

Supported platforms

Grype

LinuxmacOSWindowsDocker

JFrog Xray

JFrog ArtifactoryIDE PluginsJenkinsGitLabJiraDockerKubernetes

Compliance

Grype

JFrog Xray

SOC 2 Type IIISO 27001FedRAMPGDPR

Integrations & coverage

Integrations

Grype

SyftDockerPodmanGitHub ActionsGitLab CIJenkinsAnchore Enterprise

JFrog Xray

JFrog ArtifactoryIDEsCI/CDGit

Industries

Grype

TechnologyCross-industryOpen Source Community

JFrog Xray

Software TeamsDevSecOps

Regions

Grype

Global

JFrog Xray

GlobalUSEU

Vendor

Company

Grype

Anchore

JFrog Xray

JFrog

Headquarters

Grype

Santa Barbara, California, USA

JFrog Xray

Sunnyvale, California, USA

Company size

Grype

51-200

JFrog Xray

1,500+

Founded

Grype

2016

JFrog Xray

2008