--- title: JFrog Reviews meta_title: 'JFrog Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 150 reviews by the users' company size, role or industry to find out how JFrog works for a business like yours. aggregate_rating: rating_value: 4.2 review_count: 150 scale: '5' date_modified: '2026-07-16' parent_category: name: DevOps url: https://www.g2.com/categories/devops --- # JFrog Reviews **Vendor:** JFrog Ltd **Category:** [DevOps Platforms](https://www.g2.com/categories/devops-platforms) **Average Rating:** 4.2/5.0 **Total Reviews:** 150 ## About JFrog JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision to keep software continuously flowing, secure, and always up to date, the JFrog Platform serves as the definitive software supply chain system of record. It is uniquely engineered to power organizations as they build, manage, and distribute trusted software with unprecedented speed, security, and scale across hybrid and multi-cloud environments. As software engineering evolves in the AI era, JFrog’s newest offerings address the industry's most pressing trend: the rise of agentic software development and the hidden security risks of "Shadow AI." In response to threat actors increasingly targeting developer workflows including a massive surge in malicious open-source AI models and infected packages; JFrog has expanded its platform capabilities to deliver absolute end-to-end visibility and automated compliance. Key new innovations include the JFrog AI Catalog, which enables organizations to centralize, govern, and control the lifecycle of AI models approved for enterprise use. To secure autonomous coding environments, JFrog introduced the Universal MCP Registry and the Agent Skills Registry (developed alongside NVIDIA). These new solutions establish the industry’s first enterprise-grade trust layer to safely manage and store AI agent skills, monitor connections, and instantly block unsafe developer tools or malicious coding extensions right where developers work. Furthermore, the integration of advanced DevGovOps and Runtime Security tools allows teams to replace slow, manual compliance audits with continuous, background policy enforcement. By shifting security left directly into the binary pipeline, JFrog ensures that the volume of AI-assisted code does not outpace an organization's ability to verify its safety. Today, millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on the universal JFrog Platform to eliminate point-solution fatigue, bridge the governance gap, and securely embrace digital transformation. Learn more at www.jfrog.com or follow us on X @JFrog. ## JFrog Pros & Cons **What users like:** - Users value the **unified support for diverse package formats** in JFrog, enhancing their DevOps workflows significantly. (18 reviews) - Users value the **centralized management of artifacts** in JFrog, enhancing security and efficiency in DevOps workflows. (14 reviews) - Users value the **seamless deployment integration** of JFrog, streamlining CI/CD pipelines and enhancing security across projects. (13 reviews) - Users value the **seamless integrations** of JFrog with various tools, enhancing their CI/CD pipeline efficiency and security. (12 reviews) - Users love the **easy integrations** with various tools, enhancing their CI/CD workflow and artifact management. (11 reviews) - Users appreciate the **robust security measures** of JFrog, enhancing compliance and protection for their binaries. (11 reviews) - Users value the **seamless CI/CD integration** of JFrog, enhancing efficiency in their DevOps workflows. (10 reviews) - Users value the **seamless integration support** of JFrog, facilitating effortless migrations and workflow automation. (10 reviews) - CD Tools (9 reviews) - Users find JFrog's **user-friendly interface** and centralized repository enhance efficiency and simplify package management. (9 reviews) **What users dislike:** - Users find the **complexity** of the JFrog platform overwhelming, often requiring extensive training to navigate its functionalities. (9 reviews) - Users feel the **cost of JFrog** can be prohibitive for smaller teams, making adoption challenging and less accessible. (8 reviews) - Users face a **steep learning curve** and significant setup time, making initial adoption challenging for smaller teams. (8 reviews) - Users find the **difficult learning curve** of JFrog challenging, necessitating extensive training to harness its full capabilities. (7 reviews) - Users find the **learning difficulty** of JFrog challenging, as it requires substantial time and effort to master. (7 reviews) - Users face **performance issues** with JFrog, noting slow system responses and sudden service downtimes during high resource usage. (6 reviews) - Users express concern over **pricing issues** , citing a lack of transparency and unexpected costs with JFrog. (6 reviews) - Users find the **complex setup** of JFrog challenging, especially for those unfamiliar with its extensive tools. (5 reviews) - Confusing Interface (5 reviews) - Difficult Setup (4 reviews) ## JFrog Reviews ### 1. JFrog Simplifies Artifact Management for Organized, Reliable Deployments **Rating:** 4.5/5.0 stars **Reviewed by:** Subhashree S. | System Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** May 29, 2026 **What do you like best about JFrog?** What I like best about JFrog is how it simplifies the entire artifact management process in one place. Managing dependencies, builds, and releases becomes much more organized and reliable, especially when working across multiple environments and teams. It reduces a lot of manual effort and helps keep deployments consistent. **What do you dislike about JFrog?** One challenge with JFrog is managing repository storage as artifacts grow over time. However, implementing automated cleanup policies and regular monitoring helps keep repositories organized, optimize storage usage, and maintain smooth CI/CD performance. **What problems is JFrog solving and how is that benefiting you?** It helps solve challenges related to artifact management, dependency control, and software release reliability in DevOps environments. It centralizes binaries, packages, and build artifacts in one place, making deployments more organized and consistent across teams. This has helped improve build reliability, simplify version tracking, and reduce issues caused by dependency mismatches. It also supports faster CI/CD workflows and provides better traceability for both modern and legacy applications, making release management more efficient and secure. ### 2. Efficient, Scalable Artifact Management That Streamlines the Software Delivery Lifecycle **Rating:** 4.0/5.0 stars **Reviewed by:** Arkajit D. | Chief Technology Officer, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** May 11, 2026 **What do you like best about JFrog?** The thing that I appreciate most about JFrog is its efficiency in managing artifacts, distributing software, scanning for security vulnerabilities, and handling DevOps practices in one single platform without adding any extra operational complexity. In rapidly scaling engineering setups, where there is constant creation, deployment, and management of cloud-based applications from multiple engineering teams, having control over software packages, their dependencies, and the release pipelines has been a challenge. JFrog has been immensely useful for streamlining and improving the entire software delivery lifecycle. The ability to manage artifacts and packages via JFrog Artifactory stands out as one of the main advantages for me. Performance and scalability have also been strong in my experience, particularly when handling large-scale artifact storage, container registries, and high-frequency deployment pipelines. **What do you dislike about JFrog?** Dislikes about JFrog include its complexity to be configured and managed in large environments with customized CI/CD workflows. In other words, while the platform is indeed very useful and powerful in enterprise DevOps and artifact management use cases, at times it could be somewhat complicated to set up. One particular difficulty I've encountered is the necessity to understand various aspects of repository management, including permission handling, pipeline integration, and software supply chains. It becomes somewhat burdensome to onboard engineers into using the platform if there are not so many of them or their background is somewhat simple. In terms of usability and user experience, one might say that the platform is very efficient and offers lots of opportunities but some administrative functions may come as challenging. Namely, working with multiple repositories, access controls, and distributed environments at once can require certain skills and experience. Finally, I would mention some of the difficulties I had with some of the integrations and automation processes. While JFrog works excellently within different CI/CD ecosystems in general, it might take some effort to make the most out of advanced workflow configurations and automations. **What problems is JFrog solving and how is that benefiting you?** In the past, our development process had an inefficient workflow of artifact storage, dependency management, and CI/CD pipeline. As applications were delivered on cloud, microservice, container, and cross-team levels, it was very hard to maintain transparency and governance of software packages and releases. The biggest advantage I found with JFrog is its ability to manage artifacts and packages through JFrog Artifactory. Previously, we had to manage different repositories and track dependencies manually, but now it’s way more organized. It's pricing is also balanced. ### 3. JFrog Centralized Our Artifacts and Streamlined CI/CD **Rating:** 4.5/5.0 stars **Reviewed by:** Nijat I. | Full-stack Developer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** May 07, 2026 **What do you like best about JFrog?** JFrog work well for me.Mainly because I noticed a lot of improvement in our build and deployment process due to the centralization of all resources. We had different artifacts and different version numbers of packages before, which created confusion regarding which build to use. In JFrog, I was able to upload all artifacts in a single place and link them to my CI/CD processes. Also, the repositories used here included build packages as well as container images, and I found it very easy to troubleshoot any issues with the deployed build by referring to the version history. **What do you dislike about JFrog?** The first configuration was a lot harder for me to configure than anticipated. I still vividly recall spending hours comprehending the organizational structure of repositories, permissions, and the classification of various packages. As soon as I began to have many repositories, it took consistent effort on my part to maintain their organization or else they would easily get disorganized. I further realized that there were portions of the interface that were not as user-friendly as I would expect them to be, such as switching from one repository to another or dealing with access problems. **What problems is JFrog solving and how is that benefiting you?** Prior to using JFrog, the builds and dependencies were done in an uncontrolled fashion that led to problems with consistent versions and reliable deployments. There were instances where the various environments had different packages causing the debugging process to be much more difficult than it ought to have been. The use of JFrog for artifact management made it easy to keep track of the deployed version as well as its origin point. This made it possible to avoid deployment errors that could have easily occurred otherwise. ### 4. Strong JFrog Ecosystem for Security and CI/CD Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Sunku S. | Software Engineer I, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2026 **What do you like best about JFrog?** JFrog has a strong ecosystem, and a lot of developers use it. It’s no longer just a package manager; it has also become a security system and a CI/CD automation platform. **What do you dislike about JFrog?** As far as I know, JFrog is very good at many things, but one area that still feels difficult is the steep learning curve during the initial setup. That early complexity can make it harder for new learners to get started and learn the tool quickly. **What problems is JFrog solving and how is that benefiting you?** One of the key business problems JFrog solves is managing open-source software security risks. It serves as a central source of truth for all dependencies, both internal and external, supported by strong governance mechanisms and continuous security scanning. ### 5. Scalable Artifact Management with Strong Security Scanning and CI/CD Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Rahul D. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 15, 2026 **What do you like best about JFrog?** I like JFrog most for its artifact management and security scanning. It makes handling binaries smooth, integrates well with CI/CD pipelines, and adds strong, reliable vulnerability checks for DevOps teams, even though it can feel a bit complex for beginners. In short: scalable, secure, and integration-friendly. **What do you dislike about JFrog?** I dislike that JFrog can feel complex to use for beginners, with a steep learning curve. Its pricing is also on the higher side compared to alternatives, and some users find the reporting features limited when it comes to advanced analytics. **What problems is JFrog solving and how is that benefiting you?** JFrog helps solve the challenge of managing artifacts across the software lifecycle. Rather than dealing with scattered binaries and dependencies, it offers a centralized repository that keeps everything organized, tracked, and properly versioned. It also addresses security vulnerabilities by scanning artifacts and containers, which supports safer releases. In addition, its CI/CD integration streamlines pipelines, cutting down on manual work and helping teams deliver faster. Overall, the result is smoother DevOps workflows, fewer security risks, and quicker, more reliable software releases. ### 6. Centralized Artifact Management That Streamlines CI/CD **Rating:** 5.0/5.0 stars **Reviewed by:** Chilakala D. | Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2026 **What do you like best about JFrog?** I like JFrog because it provides a centralized repository for managing artifacts and dependencies. It integrates well with CI/CD tools, making builds and deployments more efficient. The user interface is easy to navigate, and the platform supports multiple package types, helping teams streamline software development and release management. **What do you dislike about JFrog?** JFrog is a powerful platform, but the initial setup and configuration can be complex, especially for new users. Some advanced features have a learning curve, and navigating all the available options can take time. Pricing may also be a concern for smaller teams. Better onboarding documentation and more beginner-friendly tutorials would make the platform easier to adopt. **What problems is JFrog solving and how is that benefiting you?** JFrog helps us solve the challenge of managing software artifacts and dependencies in a centralized and secure way. It integrates with our CI/CD pipeline, making builds, version control, and deployments more reliable and consistent. This reduces manual effort, minimizes deployment errors, improves collaboration across development teams, and speeds up software delivery while maintaining traceability of released artifacts. ### 7. Centralized Artifacts, Smooth Deployments, and Reliable CI/CD with JFrog **Rating:** 4.0/5.0 stars **Reviewed by:** Elsa L. | Sortation Operative , Enterprise (> 1000 emp.) **Reviewed Date:** July 05, 2026 **What do you like best about JFrog?** What I like most about JFrog is how it centralizes everything related to software packages and artifacts in one place. That consolidation has made our release process far more organized and dependable. Instead of juggling packages across multiple repositories, we can store, version, and distribute them from a single platform, which makes deployments noticeably smoother. A feature I rely on often is Artifactory’s support for multiple package formats. Whether we’re working with Docker images, Maven, npm, or other package types, it all gets handled in a consistent way. Integrating it with our CI/CD pipeline was also straightforward, and once it was connected, it automated a lot of the manual steps we used to do ourselves. As a result, we’ve saved time and seen fewer deployment mistakes. From a UI standpoint, the interface feels clean and easy to navigate. Finding artifacts, checking versions, and managing repositories doesn’t require digging through complicated menus, which is especially useful when we’re troubleshooting build issues. Performance has been strong as well. Uploads and downloads are fast, and we’ve rarely run into downtime or delays, even when multiple developers are working at the same time. That level of reliability gives us more confidence during releases. I’ve also appreciated the documentation and onboarding experience. There are plenty of guides and examples, so getting started wasn’t difficult, and when we’ve needed support, the responses have been helpful and knowledgeable. Another feature that has added value is JFrog’s AI-powered security and intelligence capabilities. The platform helps surface vulnerabilities and provides useful insights into dependencies, making it easier to identify potential risks early in the development lifecycle instead of discovering them later during deployment. One unexpected benefit has been improved traceability. Being able to quickly see where artifacts came from, which versions were deployed, and how everything ties together has made debugging and auditing much easier than it used to be. Overall, JFrog has streamlined our development workflow, improved collaboration across the team, and reduced the time we spend managing artifacts manually. While it’s a premium product, the time savings, automation, reliability, and intelligent security insights have made it a worthwhile investment for our team. **What do you dislike about JFrog?** JFrog is a powerful platform, but it does have a fairly steep learning curve, especially when configuring advanced features. While the UI is clean, some settings could be more intuitive. The pricing can also be high for smaller teams, and the AI-powered features, while useful, could provide more proactive recommendations and automation. Improving onboarding, simplifying advanced workflows, and enhancing the AI capabilities would make the overall experience even better. **What problems is JFrog solving and how is that benefiting you?** JFrog helps us centralize artifact management and automate our software delivery process. Instead of managing packages across multiple repositories, everything is stored, versioned, and distributed from a single platform, which makes deployments more reliable and reduces manual work. It has also improved collaboration across our development team, made it easier to track artifact versions, and helped identify security issues earlier in the development lifecycle. Overall, it's saved us time, reduced deployment errors, and made our release process much more efficient. ### 8. Reliable, Scalable Artifact Management with Broad Package Manager Support **Rating:** 4.5/5.0 stars **Reviewed by:** Harshal P. | Software Engineer, Defense & Space, Mid-Market (51-1000 emp.) **Reviewed Date:** July 02, 2026 **What do you like best about JFrog?** JFrog delivers an exceptionally reliable, centralized artifact repository management system that scales smoothly alongside enterprise CI/CD pipelines. What really sets it apart is its strong, native support for a wide range of package managers—such as Docker, npm, Maven, PyPI, and NuGet—so development teams can rely on a single, unified source of truth for all binary builds. In addition, its seamless integration with automated security and compliance scanning tools helps ensure dependencies are thoroughly checked for vulnerabilities well before they reach production, which significantly increases overall confidence in deployments. **What do you dislike about JFrog?** As artifact storage scales, licensing and infrastructure costs can become quite high, often requiring significant compute resources and strict cleanup policies to avoid storage bloat. On top of that, the artifact search can feel slow when you’re working with very large repositories, and multi-region replication sometimes experiences minor synchronization delays that can temporarily slow down localized CI/CD pipelines. **What problems is JFrog solving and how is that benefiting you?** JFrog is a centralized, highly reliable binary repository manager that helps streamline our CI/CD pipelines. It solves the problem of fragmented dependency management by securely hosting our internal artifacts and caching third-party packages in one place. As a result, we get consistent, reproducible builds across multiple development teams, and our build times are significantly reduced. On top of that, its robust access controls and integrations with security scanning tools help us identify and remediate vulnerabilities early in the development lifecycle, supporting overall software integrity. ### 9. Reliable Artifact Manager with Seamless CI/CD Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Megha C. | Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 15, 2026 **What do you like best about JFrog?** I like JFrog because it securely stores all artifacts in one place, integrates seamlessly with CI/CD pipelines, and manages artifact versions. This makes deployments more reliable, simplifies rollbacks, and helps the team use the same tested build across all environments. I also find its integration with Jenkins particularly effective. JFrog is reliable for artifact management, supports version control, and makes deployments consistent and easy to manage. Using JFrog in the CI/CD pipeline was quite easy once the repository and credentials were set up. **What do you dislike about JFrog?** I find JFrog's UI challenging as a beginner, and setting up permissions can be complex for me in large environments. **What problems is JFrog solving and how is that benefiting you?** I securely store artifacts with JFrog, integrating with CI/CD for reliable deployments and consistency across environments. It makes rollbacks easy but I find the UI tough as a beginner, and managing permissions and repositories gets complex in large setups. ### 10. Secure, Cloud-Native DevSecOps Platform Built for Enterprise Scale **Rating:** 5.0/5.0 stars **Reviewed by:** Akash v. | Cloud Devops Consultant , Mid-Market (51-1000 emp.) **Reviewed Date:** June 09, 2026 **What do you like best about JFrog?** It feels very secure. The platform helps organizations manage, secure, and automate software delivery from development through production. I also appreciate the company’s strong focus on DevSecOps, software supply chain security, and support for modern cloud-native environments, which all feel highly relevant to where the industry is heading. **What do you dislike about JFrog?** I wouldn’t say this is a dislike, but one challenge with JFrog is that the platform is extremely comprehensive. For new users, or for organizations that are still early in their DevOps journey, that breadth of capabilities can come with a real learning curve. Still, it’s often the trade-off for having a powerful platform that can support complex enterprise needs at scale. **What problems is JFrog solving and how is that benefiting you?** JFrog addresses the challenge of managing and securing the software supply chain. Modern applications rely on thousands of libraries, containers, packages, and deployment artifacts, and without strong controls, organizations can quickly run into problems with version management, security vulnerabilities, compliance requirements, and unreliable releases. JFrog offers a unified platform to manage artifacts, automate CI/CD pipelines, scan for vulnerabilities, and maintain traceability across the software development lifecycle. In my view, this enables teams to ship software faster while also strengthening security and improving overall reliability. ## JFrog Discussions - [What are the benefits and challenges of using JFrog for managing your software supply chain?](https://www.g2.com/discussions/what-are-the-benefits-and-challenges-of-using-jfrog-for-managing-your-software-supply-chain) - [What does Jfrog Platform do?](https://www.g2.com/discussions/what-does-jfrog-platform-do) - [What is difference between JFrog and Nexus?](https://www.g2.com/discussions/what-is-difference-between-jfrog-and-nexus) - [What is Artifactory software used for?](https://www.g2.com/discussions/what-is-artifactory-software-used-for) - [View JFrog pricing details and edition comparison](https://www.g2.com/products/jfrog-2024-03-28/reviews/jfrog-review-7754859?section=pricing&secure%5Bexpires_at%5D=2026-07-16+11%3A07%3A47+-0500&secure%5Bsession_id%5D=21e0d1fd-341f-43e0-be7e-f4067097854b&secure%5Btoken%5D=47dddfd7ffddd6dbe2ee2282b51d4c8946dfed85daafbdecc4c086572089a17c&format=llm_user) ## JFrog Integrations - [Amazon Redshift](https://www.g2.com/products/amazon-redshift/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Docker](https://www.g2.com/products/docker-inc-docker/reviews) - [Elastic Stack](https://www.g2.com/products/elastic-stack/reviews) - [Git](https://www.g2.com/products/git/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Informatica API and Application Integration](https://www.g2.com/products/informatica-api-and-application-integration/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [Kubernetes](https://www.g2.com/products/kubernetes/reviews) - [Visual Studio](https://www.g2.com/products/visual-studio/reviews) - [Visual Studio Code](https://www.g2.com/products/visual-studio-code/reviews) ## JFrog Features **Administration** - Configuration Management - Access Control - Dashboards **Administration** - API / Integrations - Extensibility **Administration ** - Administration Console - Task Management - Dashboards and Visualizations - Access Control **Deployment** - Language Flexibility - Framework Flexibility - Versioning - Ease of Deployment - Scalability **Functionality** - Deployment-Ready Staging - Integration - Extensible **Functionality** - Package Management - Integration - Code Analysis - Vulnerability Checks **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Device Recognition** - Device Discovery - Device Types - Dashboard **Management** - Configuration Management - Access Control - Orchestration **Functionality** - Integrations - Extensibility - Test Customization **Deployment** - Language Flexibility - Framework Flexibility - Versioning - Ease of Deployment - Scalability **Security** - Tampering - Malicious Code - Verification - Security Risks **Functionality - Software Bill of Materials (SBOM)** - Format Support - Annotations - Attestation **Functionality** - Deployment Automation - Process Analytics - Plugins - APIs / Integrations **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Code Analysis **Automation** - Test Automation - Release Automation **Management** - Cataloging - Monitoring - Governing - Model Registry **Management** - Processes and Workflow - Reporting - Automation **Management** - Package Access Control - Package Tracking - Automation - Rollback **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Monitoring** - Device Status - Alerts & Notifications - Analytics **Functionality** - Automation - Integrations - Extensibility **Management** - Automation - Processes and Workflow - Reporting **Operations** - Metrics - Infrastructure management - Collaboration **Tracking** - Bill of Materials - Audit Trails - Monitoring **Management - Software Bill of Materials (SBOM)** - Monitoring - Dashboards - User Provisioning **Processes** - Pipelines - Orchestration - Workflow Visualization **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **IT Management** - Workflow Management - Infrastructure Management - IT Discovery **Provisioning** - Remote Configuration - Event Triggering - Device Diagnostics & Repair - Firmware Updates **Processes** - Pipeline Control - Workflow Visualization - Continuous Deployment **Management** - Cataloging - Monitoring - Governing **Agentic AI - Continuous Integration** - Autonomous Task Execution - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Agentic AI - Continuous Delivery** - Autonomous Task Execution - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Generative AI** - AI Text Generation - AI Text Summarization **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution ## Top JFrog Alternatives - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (881 reviews) - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,312 reviews) - [Harness Platform](https://www.g2.com/products/harness-platform/reviews) - 4.6/5.0 (300 reviews)