Integrations / Dynatrace

Dynatrace

Unify and contextualize JFrog Xray security findings and audit activity in Dynatrace to prioritize, visualize, and automate remediation.
Start Free Book a Demo

Dynatrace Integration

Unify security event ingestion

The integration ingests JFrog Xray vulnerability findings, scan events, and JFrog audit logs into Dynatrace as security events, powered by Dynatrace OpenPipeline, giving teams a single pane of glass across security tools.

Prioritize by runtime context

Findings on container images are matched to running containers Dynatrace monitors, using the container image digest, so teams can prioritize the JFrog Xray findings that affect live production workloads rather than every reported issue.

Score findings consistently

Dynatrace maps JFrog Xray severities to a common risk level and score using its Semantic Dictionary and static severity-to-score normalization, so findings from JFrog can be compared consistently alongside other scanners.

Visualize, automate, and investigate

Teams can visualize findings and trends in Dashboards, prioritize in Notebooks, trigger ticket or chat notifications for critical findings with Workflows, and use Security Investigator for threat hunting and incident forensics.
Documentation
Availability
Learn More
  • Enterprise X
  • Enterprise+
Related Product
Related Integration
GitHub Integration
Sonar
Related Resources
Documentation

Dynatrace Hub Listing

Read
Documentation

Dynatrace Documentation

Read

Frequently Asked Questions

Which data does the integration bring into Dynatrace?

Three types: JFrog Xray vulnerability finding events, vulnerability scan events (which show scan coverage per artifact), and JFrog audit logs representing user activity.

How does Dynatrace get the data from JFrog?

A Dynatrace extension running on ActiveGate periodically polls JFrog REST APIs for Xray findings and audit logs, then ingests via Cloud Log Streaming and maps the data to the Dynatrace Semantic Dictionary.

Can findings be tied to what's actually running in production?

Yes, for container images. Dynatrace matches the container_image.digest field on JFrog findings to running containers it monitors, so teams can see which vulnerabilities affect live workloads.

What's required on the JFrog side to set this up?

JFrog Xray enabled on the platform(with Cloud Log Streaming), an access token with permission to read Xray findings and audit logs, and Xray watches and policies configured on the repositories to be monitored.

About Dynatrace

Dynatrace is advancing observability for today’s digital businesses, helping to transform the complexity of modern digital ecosystems into powerful business assets. By leveraging AI-powered insights, Dynatrace enables organizations to analyze, automate, and innovate faster to drive their business forward.
Learn More