JFrog Reviews & Product Details

I love JFrog's support for all types of packages, as it acts like a 'joker' and supports more than 30 types of technologies in one place. I am impressed by the proactive security provided by JFrog Xray, which automatically and continuously scans for vulnerabilities, alerting us immediately if a new vulnerability appears. I also appreciate the version and metadata management, where JFrog maintains a complete identity for each file, greatly facilitating error tracking. Additionally, I like the lifecycle automation tool that ensures what has been tested is what will be deployed to the public, along with the very seamless cloud setup that eliminates concerns about infrastructure, and the interface that helps in quickly creating the first repository. Review collected by and hosted on G2.com.

The learning curve due to the vastness of the platform and its numerous features causes new users to struggle initially. The problem: The user interface (UI) is filled with complex options and settings. Review collected by and hosted on G2.com.

I primarily use JFrog Artifactory as a centralized repository manager to handle the lifecycle of my software packages, and it effectively eliminates the friction that slows down a high-stakes development cycle. I love how it serves as the ultimate safety net and speed booster for our entire software supply chain. Thinking of JFrog as a 'safety net' and 'speed booster' isn't just marketing—it literally describes the difference between a smooth release and a weekend spent fixing a broken production environment. It's particularly beneficial when juggling the responsibilities of a Senior Full Stack Developer in a fast-paced environment. JFrog acts as the 'connective tissue' that links my code to my infrastructure, and its key integrations keep my workflow moving smoothly. Review collected by and hosted on G2.com.

While I’m a big advocate for JFrog, being a Senior Java Full Stack Developer means I also have to deal with its 'rougher' edges. No tool is perfect, especially one that tries to do as much as the JFrog platform. Based on my experience as a Senior Java Full Stack Developer, there are several technical and workflow-specific areas where I’d like to see JFrog push further. While it’s the backbone of our supply chain here in Seattle, these improvements would significantly reduce the daily 'to-do' list for a senior dev. Review collected by and hosted on G2.com.

Since my earlier experience, I’ve started using JFrog beyond just artifact management. I’ve explored its capabilities around end-to-end CI/CD pipelines, security integrations, and automation workflows, especially while working on more infrastructure and DevOps-heavy tasks.

I particularly like how JFrog brings together artifact management, security scanning, and release orchestration into a single platform. Features like Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) have been useful for improving visibility into dependencies and maintaining better security hygiene. Review collected by and hosted on G2.com.

While JFrog is powerful, some areas like release bundle distribution and configuration workflows can still feel a bit complex and not very intuitive at first. There’s definitely a learning curve, especially for new users working with advanced DevOps features.

Improving UI clarity, onboarding documentation, and simplifying certain workflows would make adoption smoother. Review collected by and hosted on G2.com.

Building on our existing use of JFrog for artifact management and CI/CD, several newer capabilities stand out:

AI Model Governance is a big one. JFrog AI Catalog lets teams identify and access AI models approved for use within their org, with governance controls over AI added to applications JFrog — essential as AI adoption accelerates across teams.

Shadow AI Detection adds visibility we didn't have before. It gives enterprises control over unmanaged AI models and API usage, guarding against security and compliance risks from uncontrolled AI adoption. JFrog

Auto-remediation is a real time-saver. JFrog can now automatically replace risky packages with approved compliant versions JFrog, reducing manual triage significantly.

Proven ROI makes the investment easy to justify. A Forrester study found the platform delivered 282% ROI and saved 38 hours per developer on onboarding. Review collected by and hosted on G2.com.

Beyond the earlier feedback on complexity and pricing, a few additional areas stand out:

UI Cohesion — As JFrog adds products like AppTrust, AI Catalog, and Advanced Security, the experience between modules still feels disjointed. A more unified interface would help daily usability.

Pricing Transparency — It's not always clear which newer features are included in existing plans versus requiring upgrades, making budgeting harder for smaller teams.

Documentation for Advanced Use Cases — Complex setups like multi-repo configurations or custom SBOM workflows often require piecing together answers from community forums rather than official docs.

Uptrust Timeline — JFrog's supply chain trust product isn't expected until September 2026 Investing.com, leaving a gap for teams who need those capabilities now. Review collected by and hosted on G2.com.

I use JFrog mainly as an artifactory for Docker images and npm packages. I love its universal package management, and my favorite feature is virtual repositories, which provide my team with a single URL for all our dependencies. I really appreciate how well JFrog integrates with the rest of our 2026 stack, especially GitHub Copilot. JFrog's curation is excellent for blocking malicious zero-day packages before they can even hit our local cache. Using the JFrog app for GitHub, I can link my source code directly to the final binary, making traceability automatic. The 2026 stack integration allows me to see security alerts directly in my IDE, so I don't have to switch to a dashboard. Lastly, the technical setup through Docker was a breeze. Review collected by and hosted on G2.com.

I dislike the false positives and high entry fee. The configuration setup was a bit of a maze. Review collected by and hosted on G2.com.

I like how JFrog simplifies and secures the entire software delivery process. The platform brings together artifact management and security scanning and I appreciate how strongly it focuses on DevOps and automations. Having a single trusted source of dependencies removes a lot of friction instead of pulling packages from multiple external repositories, and the security scanning features add another layer of confidence. Review collected by and hosted on G2.com.

I don't like the complexity of setup and configuration, especially for large DevOps teams. Clearer onboarding and documentation for new users would really help since it took some time to figure out the initial configuration. Review collected by and hosted on G2.com.

I love how JFrog keeps software versions consistent across multiple machines, which is crucial for my work. It helps reduce errors during installs and upgrades, saving me a lot of time. Additionally, the fact that JFrog works very well with automation allows me to automate processes and focus on other tasks simultaneously. Review collected by and hosted on G2.com.

To be honest it is not beginner friendly. I think you must provide free training for the beginners. Lol it was not easy but through research and help from my team I managed. Review collected by and hosted on G2.com.

I like JFrog because it is very user-friendly and easy to use. I can integrate it with CI/CD, which is super useful, and the initial setup was quite easy. Although it requires understanding the process at the beginning, everything is all good now. My team switched from AWS for something that feels more like an upgrade, easier to use, and aesthetically pleasing. Review collected by and hosted on G2.com.

Maybe the setup could be a bit easier. Just a lot of going back and forth and can be a bit exhaustive. Review collected by and hosted on G2.com.

I use JFrog for learning more about the services and product offered, as well as Cloud deployments with features like end-to-end visibility. I like the features, especially the ones doing the heavy lifting of the work, including monitoring and flows. Also, I like the integrations available like ServiceNow and Sonar for code quality. The initial setup of JFrog was quite easy. Review collected by and hosted on G2.com.

I would like to see more integrations where things can be out of the box Review collected by and hosted on G2.com.

I really like how easy to use JFrog is and its user-friendly UI. It helps me navigate dependencies easily and search for required repositories under the central and virtual repo. The setup process was also straightforward, taking just a day to complete. Review collected by and hosted on G2.com.

API key expiring and rotating every 30 days Review collected by and hosted on G2.com.