JFrog guide
JFrog pricing explained: Platform tiers, consumption and where Xray fits (2026)
JFrog Platform tiers and published starting prices for SaaS and Self-Managed, how consumption and overage work, where Xray, Curation and Advanced Security sit.
By Spreeze team · Published · 5 min read
JFrog sells the JFrog Platform (Artifactory plus security and other modules) in three tiers: Pro, Enterprise X and Enterprise+. SaaS is priced monthly with a base consumption allowance and per-GB overage. Self-Managed is priced per year by number of servers. Published starting prices run from US$150 per month (SaaS Pro, currently shown at US$50 as a limited-time offer) to US$51,000 per year (Self-Managed Enterprise X), with Enterprise+ quoted individually. Xray, now called Code & Binary SCA, is included from Enterprise X. Curation and Advanced Security are add-ons.
All prices below are JFrog list prices in USD from jfrog.com/pricing, checked on 13 October 2026.
SaaS tiers
| Tier | Published price | Base consumption | Support | Projects |
|---|---|---|---|---|
| Pro | US$150/month list, shown at US$50/month as a limited-time offer | 25 GB | Community | 3 |
| Enterprise X | From US$950/month | 125 GB | 24/7 SLA | 30 |
| Enterprise+ | Custom | Custom | 24/7 high touch | From 300 |
JFrog list prices (checked 13 October 2026). The Pro offer has no stated end date.
SaaS Pro is billed monthly. Enterprise X offers scalable consumption rates on annual contracts. JFrog hosts SaaS in 30 locations across 3 cloud providers, so ask which regions suit your latency and data needs.
Self-Managed tiers
| Tier | Published price | Servers included | Projects |
|---|---|---|---|
| Pro X | From US$27,000/year | 1 | 3 |
| Enterprise X | From US$51,000/year | 3 | 30 |
| Enterprise+ | Custom | 6 | From 300 |
JFrog list prices (checked 13 October 2026).
Self-hosted licences need at least a one-year contract. JFrog notes that Enterprise tiers allow multi-region contracts and volume discounts. Servers are the key sizing unit: if you need high availability or several sites, the server count often decides the tier.
How SaaS consumption works
On SaaS, storage plus data transfer count towards your monthly consumption. Usage above the base allowance is charged per GB on a sliding scale.
| Tier | Published overage rates per GB |
|---|---|
| Pro | US$1.25 (25 to 1,204 GB), US$1.00 (1,204 to 2,024 GB), US$0.75 (above 2,024 GB) |
| Enterprise X | US$1.25 (125 to 1,124 GB), US$1.00 (1,124 to 2,124 GB), US$0.75 (2,124 to 6,124 GB), US$0.55 (6,124 to 20,124 GB), US$0.33 (above 20,124 GB) |
| Enterprise+ | Custom |
As published on jfrog.com/pricing (checked 13 October 2026). JFrog’s own worked example on the page implies a slightly different Pro boundary, so confirm the exact bands in your quote.
JFrog does not block accounts that exceed their allowance. The extra is added to the monthly bill, which is convenient but means you need to watch usage.
Worked examples (arithmetic only)
- Pro, 60 GB in a month: 35 GB over the 25 GB base, at US$1.25 = US$43.75 on top of the subscription.
- Enterprise X, 400 GB in a month: 275 GB over the 125 GB base, at US$1.25 = US$343.75 on top of the starting price of US$950.
These use the published rates only. Your quote may differ.
Where Xray, Curation and Advanced Security sit
| Capability | SaaS Pro | Enterprise X | Enterprise+ |
|---|---|---|---|
| Artifactory, container registry | Yes | Yes | Yes |
| Code & Binary SCA (Xray) | No | Included | Included |
| Curation | No | Add-on | Add-on |
| Advanced Security | No | Add-on | Add-on |
| Multisite replication | No | Yes | Yes |
| Platform Federation | No | No | Yes |
| SSO (SAML, OIDC and others) | LDAP only | Yes | Yes |
From JFrog’s pricing comparison (checked 13 October 2026). On Self-Managed, the comparison table also lists Code & Binary SCA in Pro X.
What each one does:
- Xray (Code & Binary SCA) scans repositories, builds and container images (including Docker image layers) for known vulnerabilities and licence issues and generates SBOMs. See our JFrog Xray page.
- Curation blocks risky open-source packages at the point of request, based on policies such as severity, licence and package age, and can serve the highest compliant version instead.
- Advanced Security adds deeper scanning. Some individual features (such as secrets detection and SAST) are listed as paid add-ons without a published price.
JFrog also offers bundles. Unified Security (Enterprise X and Enterprise+) groups Curation, Advanced Security, agentic remediation and related features, with a base covering 200 developers. Ultimate Security (Enterprise+ only) adds AI Catalog and AppTrust. Other paid add-ons without published prices include Gold or Platinum support, a 99.99% uptime option, IoT device bundles and Runtime.
How to estimate your usage
Before you request a quote, gather these numbers. They make the difference between a guess and a reliable estimate.
For SaaS
- Current storage. Total size of the repositories you will move, by package type.
- Growth. How much new storage you add per month, and whether you have cleanup or retention policies.
- Data transfer. Downloads by CI pipelines and developers. Busy pipelines that pull large Docker images on every run drive transfer more than anything else.
- Caching. Whether build agents cache dependencies locally, which reduces transfer.
For Self-Managed
- Availability target. One server or a highly available cluster.
- Sites. How many data centres or regions need local repositories.
- Infrastructure cost. Your own servers, storage and database are on top of the licence.
For security
- Developers covered. Bundles are sized by developer count.
- Package types you need scanned or curated.
- Existing tools that Xray or Curation would replace, so you compare the total.
SaaS or Self-Managed?
SaaS is usually cheaper to start and removes operations work, but consumption needs watching. Self-Managed has a higher entry price and your own infrastructure costs, but it gives you control over location and no per-GB charges from JFrog. If you are also comparing vendors, read our Artifactory vs Nexus comparison, which includes cases where Nexus is the cheaper fit.
Buying JFrog from South Africa
JFrog’s channel programme lets partners resell and bill customers directly. Spreeze is a JFrog partner and can quote in USD or ZAR (your choice), with VAT shown on a South African tax invoice. See our JFrog services or request a quote with the usage numbers above.
JFrog and Artifactory are trademarks of JFrog Ltd. Other names are trademarks of their respective owners.