CAST Highlight vs JFrog Xray comparison

Cancel
You must select at least 2 products to compare!
CAST Logo
452 views|323 comparisons
100% willing to recommend
JFrog Logo
5,811 views|4,307 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between CAST Highlight and JFrog Xray based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed CAST Highlight vs. JFrog Xray Report (Updated: March 2024).
768,924 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It offers good performance.""The most valuable features of CAST Highlight are automation and speed.""CAST Highlight is easy to use and has a good dashboard.""The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages.""The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

More CAST Highlight Pros →

"I would say that this solution has helped our organization by allowing us to automate a lot of the processes.""Good reporting functionalities.""If multiple dependencies and vulnerabilities are found in a project, JFrog Xray is intelligent enough to tell you which vulnerability to target first.""JFrog Xray shows us a list of vulnerabilities that can impact our code.""The most valuable feature of JFrog Xray is the display of the entire internal dependencies hierarchy.""The solution is stable and reliable.""JFrog Xray's reporting feature has a lot of options in it, including scanning."

More JFrog Xray Pros →

Cons
"There's a bit of a learning curve at the outset.""Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time.""CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves.""The ease of configuration and customization could be improved in CAST Highlight.""The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

More CAST Highlight Cons →

"The speed of JFrog Xray should improve. Other solutions have better performance.""JFrog Xray's documentation and error logging could be improved.""Since we have been using the solution via APIs, there are some limitations in the APIs.""JFrog Xray does not have a dashboard.""Lacks deeper reporting, the ability to compare things.""Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore, we require customized reports from the Xray tool.""I think that the user interface should be expanded to provide customers with a better dashboard for reviewing their feedback regarding their images and the vulnerabilities that are associated with the images."

More JFrog Xray Cons →

Pricing and Cost Advice
  • "CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."
  • "It is a pretty costly tool. A lot of customers are resistant to using it."
  • "Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."
  • "CAST Highlight is an expensive solution."
  • More CAST Highlight Pricing and Cost Advice →

    Information Not Available
    report
    Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
    768,924 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most valuable features of CAST Highlight are automation and speed.
    Top Answer:CAST Highlight is an expensive solution. On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight or nine out of ten.
    Top Answer:The ease of configuration and customization could be improved in CAST Highlight.
    Top Answer:JFrog Xray shows us a list of vulnerabilities that can impact our code.
    Top Answer:There is a tool called DefectDojo for reporting. Reporting is crucial, but it is lacking in the current tool. Every organization seeks specific data points rather than general information. Therefore… more »
    Top Answer:We use this solution to identify vulnerabilities in the dependency file. We have the Artifactory package which integrates with Xray-like plugins. We can automatically plug this tool into Xray to… more »
    Ranking
    Views
    452
    Comparisons
    323
    Reviews
    5
    Average Words per Review
    567
    Rating
    7.8
    Views
    5,811
    Comparisons
    4,307
    Reviews
    6
    Average Words per Review
    495
    Rating
    8.2
    Comparisons
    SonarQube logo
    Compared 70% of the time.
    Checkmarx One logo
    Compared 5% of the time.
    Snyk logo
    Compared 5% of the time.
    Veracode logo
    Compared 5% of the time.
    Coverity logo
    Compared 2% of the time.
    Black Duck logo
    Compared 29% of the time.
    Snyk logo
    Compared 11% of the time.
    Mend.io logo
    Compared 8% of the time.
    Veracode logo
    Compared 8% of the time.
    Also Known As
    JFrog Security Essentials
    Learn More
    Overview

    CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

    CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

    JFrog is on a mission to enable continuous updates through Liquid Software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. The world’s top brands such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify are among the 4500 companies that already depend on JFrog to manage binaries for their mission-critical applications. JFrog is a privately-held, global company, and is a proud sponsor of the Cloud Native Computing Foundation [CNCF].

    If you are a team player and you care and you play to WIN, we have just the job you're looking for.

    As we say at JFrog: "Once You Leap Forward You Won't Go Back!"​

    Sample Customers
    Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF
    google, amazon, cisco, netflix, oracle, vmware, facebook
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm19%
    Computer Software Company17%
    Insurance Company10%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm23%
    Manufacturing Company15%
    Computer Software Company12%
    Insurance Company5%
    Company Size
    VISITORS READING REVIEWS
    Small Business12%
    Midsize Enterprise14%
    Large Enterprise74%
    REVIEWERS
    Midsize Enterprise29%
    Large Enterprise71%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise10%
    Large Enterprise76%
    Buyer's Guide
    CAST Highlight vs. JFrog Xray
    March 2024
    Find out what your peers are saying about CAST Highlight vs. JFrog Xray and other solutions. Updated: March 2024.
    768,924 professionals have used our research since 2012.

    CAST Highlight is ranked 10th in Software Composition Analysis (SCA) with 5 reviews while JFrog Xray is ranked 7th in Software Composition Analysis (SCA) with 7 reviews. CAST Highlight is rated 7.8, while JFrog Xray is rated 8.2. The top reviewer of CAST Highlight writes "Easy to set up with optimized and automated insights". On the other hand, the top reviewer of JFrog Xray writes "An intelligent solution that prioritizes which vulnerability to target first in your project". CAST Highlight is most compared with SonarQube, Checkmarx One, Snyk, Veracode and Coverity, whereas JFrog Xray is most compared with Black Duck, Snyk, Mend.io, Veracode and Fortify Static Code Analyzer. See our CAST Highlight vs. JFrog Xray report.

    See our list of best Software Composition Analysis (SCA) vendors.

    We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.