DevOps platform for artifact management, SBOM generation, vulnerability scanning, and software supply-chain security.
JFrog Software Supply Chain Platform manages binaries, packages, and artifacts across the software lifecycle while generating SBOMs and scanning for vulnerabilities.
It competes in the software supply-chain and open-source security market by giving enterprises visibility and control over every component they ship.
| Attribute | JFrog Software Supply Chain Platform | Manifest Platform | Snyk Code and Container Security | |
|---|---|---|---|---|
| Provider | |  |  | |
| Founded | 2008 | 2022 | 2015 | |
| Sells To | — | Enterprise | Enterprise | |
| Pricing Model | — | Recurring, Software | Recurring, Software | |
| Ownership | Venture-backed | Venture-backed | Venture-backed |
Provider
Founded 2008
Sells To —
Pricing Model —
Ownership Venture-backed
Provider
Founded 2022
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Provider
Founded 2015
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Platform generating SBOMs and scanning containers for software supply chain security.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Platform generating SBOMs to expose software supply chain vulnerabilities.
Repo-aware agents that prioritize real risk and generate exact fixes.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Platform that discovers and manages cyber assets and security coverage gaps.
Snyk Agent Fix automatically generates code fixes for vulnerabilities Snyk identifies in application code.
SkyhighCloud-native application protection platform for security and compliance automation.
A secrets management platform for centralizing application credentials, access controls, synchronization, and audit workflows.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
Self-managed static code analysis platform for continuous inspection of code quality and security across the enterprise.
Platform generating SBOMs and scanning containers for software supply chain security.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Platform generating SBOMs to expose software supply chain vulnerabilities.
Repo-aware agents that prioritize real risk and generate exact fixes.
Automated security enforcement for Git-based workflows.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Code quality and security analysis platform for reviewing and remediating issues across more than 40 programming languages.
Platform that discovers and manages cyber assets and security coverage gaps.
Snyk Agent Fix automatically generates code fixes for vulnerabilities Snyk identifies in application code.
Cloud-native application protection platform for security and compliance automation.
SkyhighA secrets management platform for centralizing application credentials, access controls, synchronization, and audit workflows.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
Self-managed static code analysis platform for continuous inspection of code quality and security across the enterprise.
