Welcome to the JFrog Blog

Latest:

Agent Immunization: A New Model for Building Trusted AI Agents

August 24, 2026 Ohad Shalev, JFrog Product Marketing Manager, AI/ML

5 min read

The riskiest thing an AI agent does all day isn't writing code. It's shopping. Every few minutes, it reaches out for a package, an AI asset, or a tool, and pulls it in with no real way to check what's inside. We think the fix is agent immunization: security that lives inside what an agent…

Read More

All Blogs

Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform

Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform

August 24, 2026 CTO Office, JFrog | 3 min read

The way software gets built is changing faster than at any point in the last decade, and the software supply chain has to keep up. A year ago at swampUp, we introduced JFrog Fly: the first agentic repository, serving as a fast, AI-native environment to build what a modern, agentic developer workflow could look like,…
Read More
Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessment

Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessment

August 27, 2026 Lital Hadad | 5 min read

JFrog has reached a major milestone: An IRAP assessment at the Protected level, across the full JFrog Platform. Conducted by CyberCX, an Australian Signals Directorate (ASD)-endorsed assessor, against the ISM, it independently validates that the platform managing an agency’s software supply chain meets the bar for Australia’s most sensitive workloads. It reasserts a commitment that…
Read More
Coding Agents Just Reopened Your Software Supply Chain Blind Spot

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

August 25, 2026 Yonatan Philip, JFrog Senior Product Manager | 6 min read

Most organizations spent years hardening their software supply chain. The model is familiar: dependencies flow through a controlled repository, policies determine what is allowed, scanning catches what slips through, and every action is logged for auditability. It works because human developers operate within environments that enforce these rules. AI coding agents break that assumption entirely.…
Read More
Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

August 21, 2026 Carmit Hershman, JFrog Senior Software Architect, CTO Office Dan Cohen, AWS Senior Solutions Architect | 19 min read

  Join us at swampUP New York, September 1-3, for our joint session Trusted AI Delivery at Scale: Securing Every Artifact from Curation to Cloud, where we walk the full chain of custody from the moment a package enters your organization to the moment your agent runs on Amazon Bedrock AgentCore. Register here. AI agents…
Read More
Frontier AI Application Security: Every Second Counts

Frontier AI Application Security: Every Second Counts

August 18, 2026 Matan Libis, JFrog Director of Product for Application Security | 8 min read

Somewhere in the last few months, the math of application security quietly broke. Anthropic's Claude Mythos Preview didn't just analyze code, it found a 27-year-old vulnerability in OpenBSD, a 16-year-old bug in FFmpeg, and a 17-year-old remote code execution flaw in FreeBSD, entirely on its own. Then it went further: it built working exploits for…
Read More
Inside the ECB’s AI Cyber Directive: What EU Banks Need to Know

Inside the ECB’s AI Cyber Directive: What EU Banks Need to Know

August 13, 2026 Nir Peleg, JFrog Global Field CISO | 6 min read

A bank isn’t just a vault holding money. It is an engine powered by implicit public trust, sustained by the continuous confidence that funds remain secure and accessible on demand. When operational risks fail, whether through cyber breaches, system outages, or third-party vulnerabilities, that trust shatters, threatening not just an individual institution, but the stability…
Read More
JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

August 12, 2026 Eldad Assis, JFrog Principal DevOps Architect, CTO Office | 6 min read

Teams running containerized workloads on Google Cloud have long relied on JFrog as their single source of truth for container images. The missing piece has been getting Google Cloud's own runtime services — like Cloud Run and Google Kubernetes Engine (GKE) — to pull directly from JFrog for every container image pull. I’m happy to…
Read More
The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

August 5, 2026 Paul Davis, Field CISO | 8 min read

Software supply chain engineering has reached a critical inflection point. As autonomous AI coding agents transition from generating autocomplete suggestions to planning, writing, reviewing, and deploying entire software pipelines without humans in the loop, the connection between human intent and production binaries is fracturing. This shift has created a severe structural deficit across enterprise tech…
Read More

Popular Tags