--- layout: markdown_page title: "JFrog Artifactory" --- ## On this page {:.no_toc} - TOC {:toc} ## Summary JFrog has transitioned from an artifact repository to a DevOps product that includes CI and CD capabilities through its acquisition of Shippable in Feb 2019. Recently in Feb 2020, JFrog announced the launch of its DevOps platform called 'JFrog Platform', a pre-integrated solution with a common UI across JFrog Pipelines, JFrog X-Ray and JFrog Source Composition Analysis products. This solution is backed by a common meta data model that facilitates information integration between these separate product. JFrog Artifactory is a tool designed to store the binary output of the build process for use in distribution and deployment. Artifactory provides support for a number of package formats such as Maven, Debian, NPM, Helm, Ruby, Python, and Docker. JFrog offers high availability, replication, disaster recovery, scalability, and works with many on-prem and cloud storage offerings. GitLab also offers high availability and replication, and scalability, also available using on-prem or cloud storage, but at the moment offers less package type compatibility than Artifactory does (Maven, Docker, NPM). However, GitLab also offers functionality to automate the entire DevOps life cycle from planning, to creation, build, verify, security testing, deploying, and monitoring. The built-in binary package repositories that GitLab offers are just the tip of the ice-berg. ## Strengths - JFrog strength is their Artifactory product that has been quite widely used to store and use artifacts in a consistent way across the enterprise. ## Gaps - Security testing is limited to Source Composition Analysis. JFrog is missing SAST and DAST security testing capability. - Source Code Management and Issue Tracking have to be done in separate products and integrated with the JFrog product. - QA Testing capability through products such as Selenium is still missing. - Multiple deployment architectures across their products. Even though the products are integrated it is essentially different products that need to be installed and managed. - Planning, Monitoring functionality is also missing in its DevOps plaftorm ## Resources * [Artifactory website](https://jfrog.com/artifactory/) * [Wikipedia page on binary repository managers](https://en.wikipedia.org/wiki/Binary_repository_manager) ## Pricing * Base server subscription cost is $3k/year (Pro), Pro X adds X-Ray add-on product, training, and better support for $14.4k/year. Enterprise supports multi-site with up to 3 servers, advanced storage (including cloud), and central control (Mission Control) add-on for about $30k/year. Their newest offering is Enterprise+ which is considered "platform" purchase, in that you are getting almost everything JFrog offers (all Artifactory add-ons), for 6 servers. This we've heard runs about $124k/year. * [Pricing page](https://jfrog.com/artifactory/buy-now/#pro) * Heard from procurement at a prospect: > "Enterprise+ was $95,000 in December 2018 and got increased by 20% in January 2019, so $124,000. That's for a 6 server licence" > "sales guy told them to buy at list or walk away" ## Comparison