Welcome to the JFrog Blog

Latest:

Why Model Routing Backfires and How to Build Agents That Don’t Burn Your Budget

July 23, 2026 Shay Dahan, JFrog Boost Co-Founder Yahav Ohana, JFrog Boost Co-Founder

8 min read

Model routing promises to cut your AI agent spend by offloading routine tasks to cheaper models like Claude Haiku while reserving frontier models like Claude Sonnet for complex reasoning. In the right configuration, routing strategies can reduce inference costs by 40–85%. But if you implement routing incorrectly in a multi-turn agent, you can end up…

Read More

All Blogs

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

July 21, 2026 Guy Korolevski, JFrog Security Researcher | 14 min read

The JFrog Security Research team has discovered and disclosed a typosquatted NuGet package named Newtonsoftt.Json.Net. Note the double t and the .Net suffix.  This package has been masquerading as the popular Newtonsoft.Json library while quietly shipping a trojanized fork. The trojan rigs Digitain, an online betting platform, and in later generations, exfiltrates rigged round results…
Read More
Governance at the Speed of AI: How DevGovOps Closes the DORA Compliance Gap

Governance at the Speed of AI: How DevGovOps Closes the DORA Compliance Gap

July 19, 2026 Nir Peleg, Global Field CISO, JFrog, and Sophie Starchenko, Senior Product Manager, DevGovOps, JFrog | 10 min read

What is DevGovOps? DevGovOps is a Software Supply Chain Engineering practice that integrates continuous governance and compliance into the DevOps software delivery lifecycle. Rather than treating compliance as a retrospective, manual hurdle, DevGovOps ensures that policy enforcement, continuous auditability, and cryptographic traceability are natural outputs of every release. By shifting from point-in-time checks to continuous…
Read More
Managing AI Agent Primitives Like Real Software Packages with APM and JFrog

Managing AI Agent Primitives Like Real Software Packages with APM and JFrog

July 14, 2026 Yonatan Arbel, JFrog Developer Advocacy Lead Daniel Meppiel, Creator of APM, Software Global Black Belt, Microsoft | 13 min read

AI agents are part of the modern development workflow. They write code, review pull requests, generate tests, call tools, interact with MCP servers, and help developers move faster. But behind every useful agent, there is something just as important as the model itself: the context that tells the agent how to behave. That context can…
Read More
Boost Is Now In Public Preview

Boost Is Now In Public Preview

July 9, 2026 Yahav Ohana & Shay Dahan, Co-Founders of Boost at JFrog | 7 min read

Today, we're excited to announce that Boost is moving out of beta and into public preview. After months of building, breaking, and rebuilding inside JFrog's own R&D organization, Boost is ready for the world. If you are currently running into token limits, unpredictable costs, or runaway usage from AI agents, Boost was built for you.…
Read More
Secure AI Workflows: The Identity and Access Management (IAM) Checklist

Secure AI Workflows: The Identity and Access Management (IAM) Checklist

July 8, 2026 Mika Lanir, JFrog Technical Writer Sean Pratt, JFrog Director of Product Marketing | 6 min read

AI agents and LLMs are already building, analyzing, and deploying code across your software development lifecycle. As software supply chains become increasingly AI-driven, proactive security and access controls are your only path to success. To effectively govern authentication and permissions without sacrificing development speed, you must update your access management strategies. By securing the AI…
Read More
Beyond Tokens SF: Best Ideas of the Evening

Beyond Tokens SF: Best Ideas of the Evening

July 7, 2026 The JFrog Team | 5 min read

AI agents are changing how software gets built, but the infrastructure around them hasn't caught up. Agents burn through tokens on noise. They take actions they shouldn't. Context evaporates between releases. And most delivery pipelines were never designed for the pace and volume of agentic development. On June 11th we brought together developers in San…
Read More
Where Severity Scores Go Wrong: “Just Add Prototype Pollution”

Where Severity Scores Go Wrong: “Just Add Prototype Pollution”

July 1, 2026 Tamir Friedman, JFrog Security Researcher Ofri Ouzan, JFrog Security Researcher | 11 min read

At JFrog, our Security Research team continuously monitors and analyzes newly disclosed CVEs across the open-source ecosystem. Throughout our research, we have repeatedly observed cases where the assigned severity score does not accurately reflect a vulnerability's real-world impact or exploitability. In fact, during 2025, JFrog researchers reassessed NVD critical-severity vulnerabilities and concluded that 96% warranted…
Read More
JFrog Named a Leader in the Inaugural Gartner<sup>®</sup> Magic Quadrant™ for Software Supply Chain Security

JFrog Named a Leader in the Inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security

June 18, 2026 The JFrog Team | 5 min read

The recognition is new; the commitment behind it isn't. It's official. Gartner just published the very first Gartner® Magic Quadrant™ for Software Supply Chain Security, and JFrog has been recognized as a Leader, placing highest for Ability to Execute among all the vendors included. For an inaugural report in a category this important, that placement…
Read More
Native Xet Protocol Support in JFrog Artifactory: How Enterprise Model Management Actually Works

Native Xet Protocol Support in JFrog Artifactory: How Enterprise Model Management Actually Works

June 24, 2026 Zohar Sacks, JFrog Senior Director of Product Tom Arie, JFrog Product Manager | 10 min read

Machine learning models are not like other software artifacts. A single fine-tuned LLM can weigh 70 GB. A model family may share 95% of its weights across dozens of variants. When hundreds of developers, training jobs, and GPU clusters all need the same model at the same time, the infrastructure underneath needs to be built…
Read More

Popular Tags