# JFrog Xray: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 17 judge labels across 2 categories by 13 of 14 models. Page: https://www.gane.ai/index/it/vendors/jfrog-xray

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 14 | 12% | 16 |
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 0% | 54 | 0% | 1 |

## What the models said for it

- "Choose JFrog Xray if your infrastructure heavily relies on Artifactory for binary management." (Gemini 3.5 Flash, SCA)
- "Choose JFrog Xray for JFrog-centered artifact and container pipelines." (Perplexity Sonar, SCA)
- "Choose JFrog Xray if your binaries/artifacts already live in JFrog." (GPT-5.4 mini, SCA)
- "JFrog Xray offers artifact, binary, container, and dependency analysis" (Claude Haiku 4.5, SCA)

## And against it

- "can be capable, but confirm which SCA, malware, reachability, SBOM, and governance capabilities require separate modules" (Perplexity Sonar, SCA)
- "Tight coupling with JFrog Artifactory limits value as a standalone tool." (Claude Haiku 4.5, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 1 | 1 | 3 |
| GPT-5.4 mini | 0 | 1 | 0 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 1 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 1 | 0 | 1 | 2 |
| Grok 4.20 | 0 | 0 | 2 | 0 | 2 |
| Mistral Small | 0 | 1 | 0 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 1 | 0 | 0 | 1 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named JFrog Xray, from 42 of the 47 answers that named it (only the models that return a source list).

### Domains cited

- sonatype.com: 23
- checkmarx.com: 19
- res.cloudinary.com: 19
- mend.io: 18
- linuxfoundation.org: 16
- g2.com: 15
- dupple.com: 14
- forrester.com: 12
- securityboulevard.com: 12
- blog.jetbrains.com: 11

### Pages cited

- https://sonatype.com/compare/best-sca-tools: 21
- https://res.cloudinary.com/snyk/image/upload/v1731508416/website-pdfs/The-Forrester-Wave-Software-Composition-Analysis-Software-Q4-2024.pdf: 19
- https://linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 16
- https://dupple.com/learn/best-software-composition-analysis-tools: 14
- https://mend.io/blog/best-software-composition-analysis-sca-tools-top-solutions: 13
- https://blog.jetbrains.com/qodana/2025/09/best-software-composition-analysis-tools: 11
- https://checkmarx.com/learn/sca/sca-tools-key-capabilities-11-tools-to-watch-in-2026: 11
- https://seemplicity.ai/faqs/what-are-the-top-10-sca-tools: 11

## In its own words

What JFrog Xray's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Integrated SCA for Software & AI Artifacts (https://jfrog.com/)
- For: Security, DevOps, and Compliance (https://jfrog.com/platform)
- Free plan or trial: Start a Trial With Artifactory and Xray (https://jfrog.com/)
- Integrations claimed: 100 (https://jfrog.com/)
- Hosting: Amazon AWS, Microsoft Azure, Google Cloud
- Customers named: Oracle, Credit Karma, FFF Enterprises, Deloitte, Technology Innovation Institute, Informatica

## What it publishes

Every page jfrog.com exposes, read 2026-09-29: 10009 addresses. By kind, pages and the last 90 days:

- blog: 959 pages, 0 in the last 90 days, latest 2021-04-07
- case study: 18 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 210 pages, 0 in the last 90 days, latest 2026-03-11
- conference or event: 43 pages, 1 in the last 90 days, latest 2026-07-28
- report or ebook: 91 pages, 0 in the last 90 days, latest undated
- comparison: 59 pages, 0 in the last 90 days, latest undated
- template or tool: 9 pages, 0 in the last 90 days, latest 2021-02-09
- glossary or explainer: 139 pages, 1 in the last 90 days, latest 2026-07-28
- podcast or video: 1 pages, 0 in the last 90 days, latest 2022-05-05
- news or press: 106 pages, 0 in the last 90 days, latest undated
- Recent: 2026-07-28 glossary or explainer: What is artifactory jfrog https://jfrog.com/blog/what-is-artifactory-jfrog
- Recent: 2026-07-28 conference or event: Jfrog to present at upcoming investor conferences 3 https://jfrog.com/press-room/jfrog-to-present-at-upcoming-investor-conferences-3
- Recent: 2026-03-11 webinar or virtual event: Webinar recap forrester tool consolidation future of appsec https://jfrog.com/blog/webinar-recap-forrester-tool-consolidation-future-of-appsec
- Recent: 2022-05-05 podcast or video: 8 of the best machine learning podcasts to listen to in 2022 https://jfrog.com/blog/8-of-the-best-machine-learning-podcasts-to-listen-to-in-2022
- Recent: 2021-04-07 blog: Npm flies with jfrog cli https://jfrog.com/blog/npm-flies-with-jfrog-cli
- Recent: 2021-02-09 template or tool: Cloud native ci cd the ultimate checklist https://jfrog.com/blog/cloud-native-ci-cd-the-ultimate-checklist

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.