JFrog Xray

JFrog Partner

Know exactly what is inside the software you ship

Name: JFrog Xray implementation
Brand: JFrog

Xray continuously scans the binaries and container images in Artifactory for vulnerabilities and licence risk, and stops policy violations before they reach production.

Quote Xray / Enterprise X Supply-chain security

What we configure

Xray set up to protect, not just to report

Policies & watches

Severity and licence rules applied to the repositories and builds that matter, with actions like blocking download or failing the build.

Deep dependency graph

Recursive scanning of transitive dependencies and image layers, where most real risk hides.

Licence compliance

Allow-lists and deny-lists for open-source licences, aligned with your legal team.

SBOM export

CycloneDX and SPDX SBOMs for customers, auditors and regulators.

CI integration

Scan results surfaced in GitLab, Jenkins or GitHub Actions pipelines via the JFrog CLI.

Triage routine

Ownership, exceptions with expiry and reporting so findings are managed, not ignored.

FAQ

JFrog Xray questions

Can't see your question? Ask us directly. We reply within one business day.

What does JFrog Xray do?

Xray is JFrog's software composition analysis (SCA). It scans the packages and container images in Artifactory, including their transitive dependencies, for known vulnerabilities and open-source licence issues, and can block downloads or builds that violate your policies.

Which JFrog tier includes Xray?

JFrog currently packages Xray as "Code & Binary SCA" in Enterprise X and above. The Pro tier does not include SCA. We confirm the exact entitlement on your quote.

How is Xray different from GitLab dependency scanning?

GitLab scans dependencies declared in your source during development. Xray scans the actual binaries stored in and flowing through Artifactory, including third-party images and packages that never pass through your source code. Using both closes gaps.

Can Xray generate SBOMs?

Yes. Xray can export software bills of materials in standard formats such as CycloneDX and SPDX for builds and artefacts, which helps with customer and regulatory requests.

Quotation desk

Request a JFrog Xray quotation

Share what you need and we will come back with a formal quotation, usually within one business day.

Quotes in USD or ZAR, your choice, with VAT shown separately
Vendor-authorised supply, with renewal reminders
Edition and seat-count advice before you buy
Reseller enquiries handled confidentially

Prefer to talk?

Call 010 003 7197, WhatsApp +27 78 810 9342 or email hello@spreeze.co.za.

Monday to Friday, 08:00 to 17:00 SAST

1 · Who you are

Full name

Work email

Company

Phone (optional)

Country

You are buying as

2 · What you need

Vendor

Product / edition

Seats / users / quantity

Subscription term

Deployment

When do you need it?

Quote currency

Current renewal date (if any)

Anything else we should know?

I agree that Spreeze may process these details to respond to this enquiry and prepare a quotation, as described in the privacy notice. Also send me occasional licensing and renewal updates (optional, unsubscribe any time).

We reply within one business day (SAST). Quotes are subject to vendor pricing and availability; VAT is shown separately.

More on JFrog

GITLAB is a trademark of GitLab Inc. in the United States and other countries and regions. JFrog, Artifactory and Xray are trademarks of JFrog Ltd. All other product names are trademarks of their respective owners and are used for identification only.