I think this is an excellent tool if you already use JFrog Artifactory. When it comes down to the integrations, you will be forced to create in a way your own JFrog CI job that would trigger Xray scanner. Review collected by and hosted on G2.com.

I don't like the number of False Positives and overwhelming clunky behavior of the scanner. Sometimes it simply fails to complete the scan no matter what deployment you use (I've encountered this for both on-prem and cloud versions). Review collected by and hosted on G2.com.