Latest News from swampUP 2026
JFrog’s Annual User Conference

Stay ahead of weaponized AI. Instantly swap vulnerable packages in your pipeline for fixed versions. No PR required.

Improve release intent verification using plain-language AI evaluation policies that generate signed evidence you can use for audits and regulatory reviews

Detect AI assets, such as MCP servers and agent skills, running on developer workstations, providing security teams greater visibility into potential business risk.

Power your agents with scanned and vetted AI assets. Block malicious components before they execute, enforce project-scoped access, and gain an auditable provenance chain.

Connect your coding agents natively to your JFrog Platform. Simplified org-wide roll out enables any coding agent to take action across your supply chain in a secure and compliant manner.

Bring software supply chain security to the network edge. Intercept and redirect direct package requests from developers, agents, and AI users through JFrog for vetting and logging..

Eliminate blind spots between cloud and AppSec teams with a single, comprehensive security view. The Wiz <> JFrog integration marries runtime signals with binary-level lineage and ownership for fast remediation.

Apply pre-built CRA, DORA, and NIST policy templates to release gates with one click. Real-time scoring helps compliance teams gain real-time visibility into compliance gaps and instant proof of coverage.

Automatically capture agent interactions and generate a signed evidence chain from commits, PR, and Jira tickets so every release ships with complete proof.

Enforce evidence-based governance directly at the repository level to stand up active policy enforcement in minutes.

Track adoption, surface utilization opportunities, and access ROI metrics from one place in MyJFrog to help you realize the full potential from your JFrog platform.

Enhance secrets detection efficacy with a second analysis layer driven by a fine-tuned, context-aware classification model.