Welcome to the JFrog Blog

Latest:

Governing the Agentic SDLC Through Continuous Policy Enforcement

October 12, 2026 Carmit Hershman, JFrog Senior Software Architect, CTO Office Yuval Kainan, JFrog AI Architect, CTO Office

14 min read

The way software gets built has changed faster than the standards that govern it. AI agents now create pull requests, select dependencies, refactor codebases, interpret test failures, and execute infrastructure changes across the entire Software Development Life Cycle (SDLC). AI agents are autonomous team members, but unlike human engineers, they are ephemeral: their reasoning, decisions,…

Read More

All Blogs

Inside the ECB’s AI Cyber Directive: What EU Banks Need to Know

Inside the ECB’s AI Cyber Directive: What EU Banks Need to Know

August 13, 2026 Nir Peleg, JFrog Global Field CISO | 6 min read

A bank isn’t just a vault holding money. It is an engine powered by implicit public trust, sustained by the continuous confidence that funds remain secure and accessible on demand. When operational risks fail, whether through cyber breaches, system outages, or third-party vulnerabilities, that trust shatters, threatening not just an individual institution, but the stability…
Read More
JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

August 12, 2026 Eldad Assis, JFrog Principal DevOps Architect, CTO Office | 6 min read

Teams running containerized workloads on Google Cloud have long relied on JFrog as their single source of truth for container images. The missing piece has been getting Google Cloud's own runtime services — like Cloud Run and Google Kubernetes Engine (GKE) — to pull directly from JFrog for every container image pull. I’m happy to…
Read More
The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

August 5, 2026 Paul Davis, Field CISO | 9 min read

Software supply chain engineering has reached a critical inflection point. As autonomous AI coding agents transition from generating autocomplete suggestions to planning, writing, reviewing, and deploying entire software pipelines without humans in the loop, the connection between human intent and production binaries is fracturing. This shift has created a severe structural deficit across enterprise tech…
Read More
Scale Your Engineering Organization Without Losing Control

Scale Your Engineering Organization Without Losing Control

August 14, 2026 Lavanya Chockalingam Ravit Shapira | 8 min read

Growing engineering organizations all hit the same wall. More teams shipping software means more repositories, more permission requests, more onboarding cycles, and eventually one platform admin fielding every change. The platform that was supposed to accelerate delivery has now become the bottleneck. JFrog Projects is built to break that pattern. It's the organizational structure that…
Read More
Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

July 27, 2026 Yoav Landman, JFrog CTO | 5 min read

UPDATE August 5, 2026: This week at Black Hat USA, the OpenAI team presented a detailed reconstruction of the chain of events behind the Hugging Face incident. I was glad to watch OpenAI speaking openly about it. This kind of transparency reflects the same spirit of collaboration we experienced working with their team behind the…
Read More
Why Model Routing Backfires and How to Build Agents That Don’t Burn Your Budget

Why Model Routing Backfires and How to Build Agents That Don’t Burn Your Budget

July 23, 2026 Shay Dahan, JFrog Boost Co-Founder Yahav Ohana, JFrog Boost Co-Founder | 8 min read

Model routing promises to cut your AI agent spend by offloading routine tasks to cheaper models like Claude Haiku while reserving frontier models like Claude Sonnet for complex reasoning. In the right configuration, routing strategies can reduce inference costs by 40–85%. But if you implement routing incorrectly in a multi-turn agent, you can end up…
Read More
The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

July 21, 2026 Guy Korolevski, JFrog Security Researcher | 14 min read

The JFrog Security Research team has discovered and disclosed a typosquatted NuGet package named Newtonsoftt.Json.Net. Note the double t and the .Net suffix.  This package has been masquerading as the popular Newtonsoft.Json library while quietly shipping a trojanized fork. The trojan rigs Digitain, an online betting platform, and in later generations, exfiltrates rigged round results…
Read More

Popular Tags