JFrog Platform Archives

DevOps-Centric Security is Finally Here | Announcing JFrog Advanced Security

October 18, 2022 Nati Davidi, SVP JFrog Security | 13 min read

Today marks an exciting day for JFrog and a substantial step forward towards ensuring end-to-end software supply chain security. JFrog Advanced Security is our unique approach for DevOps-centric security, and the only solution that was built especially for today’s modern DevOps workflows. Developers and the DevOps infrastructure are now the attack vector for today’s hackers…

JFrog Joins Rust Foundation as Platinum Member

September 6, 2022 Lori Lorusso, JFrog Open Source Program Manager & Stephen Chin, JFrog VP of Developer Relations | 3 min read

The technology ecosystem is continually evolving but one truth remains, if there is a new and emerging coding language that captures the heart and minds of developers JFrog will be there. JFrog provides a DevOps Platform to store and secure its artifacts while engaging with the community and foundations that support developers using that language.…

The Software Supply Chain Risks You Need to Know

September 6, 2022 Nati Davidi, SVP JFrog Security | 10 min read

Code that an organization’s developers create is only the beginning of modern software development. In fact, first-party code is likely to be only a small portion of an application – sometimes as little as 10% of the application’s artifact ecosystem. An enterprise’s software supply chain is made of many parts, accumulated from many sources: open…

swampUP 2022 is Going on the Road – Sign up for the Tour

August 24, 2022 The JFrog Team | 4 min read

Did you miss our info-packed keynote session at swampUP San Diego? Take a breath, swampUp is back and coming live to a city near you this October 2022. From New York to London to Munich, swampUP has you and your DevOps needs at heart. But, before you take the leap, what’s the 2022 swampUP city…

JFrog’s cloud migration story

September 11, 2023 zoer | 7 min read

Since inception in 2008, JFrog has hosted its own development environments on-prem. While this approach worked well for a time, the increasing need to deploy faster, while sustaining high quality and reducing hosting costs made us realize that we needed to leverage the JFrog SaaS Production environment. So in 2022, we started an effort to…

How To Put Cloud Nimble to Work to Segment Dev/Test from Production

August 23, 2022 John Cabaniss and Gianni Truzzi | 7 min read

In every workplace, most work gets done at the most cluttered desks. Yet the business also requires an orderly front office to run efficiently. It’s much the same with your DevOps pipeline environments, as the rough and tumble process of innovating code must ultimately produce cleanly released applications. Continuous integration means that developers perform many…

How To Put Cloud Nimble to Work to Shift Left Security

July 20, 2022 John Cabaniss, Strategic Solutions Architect and Gianni Truzzi | 6 min read

Shifting security left means preventing developers from using unacceptably vulnerable software supply chain components as early as possible: before their first build. By helping assure that no build is ever created using packages with known vulnerabilities, this saves substantial remediation costs in advance. Some JFrog customers restrict the use of open source scanning software (OSS)…

Team Up on DevSecOps with JFrog Platform App for Microsoft Teams

July 11, 2022 Deep Datta and Karol Harezlak | 4 min read

The JFrog DevOps Platform is your mission-critical tool for your software development pipelines. The results of key binary management events in JFrog Artifactory, JFrog Xray, and JFrog istribution can reveal whether or not your software pipelines are on-track to deliver production-quality releases. The new JFrog Platform app for Microsoft Teams brings real-time visibility and awareness…

Part I: A Journey of a Thousand Binaries – Types of Software Dependencies

June 22, 2022 Ixchel Ruiz, Developer Advocate | 7 min read

TL;DR We use software dependencies as part of our ongoing daily work. In part one of this series, we’ll take a look into what dependencies are, why we use them and the tools we can use to manage them and gain trust in our software supply chain. Software Dependencies Dependencies are artifacts that enable applications…

Pyrsia: Decentralized Package Network that Secures the Open Source Supply Chain

May 25, 2022 Sudhindra Rao | 7 min read

State of Supply Chain Security Supply chain security has received a lot of attention in recent years. And rightly so. Software vulnerability exploitation attacks have been a key tool in the hands of the hackers to hamper businesses, compromise sensitive data, and a cause of general sense of fear around open source software. Many of…

Welcome to the JFrog Blog

Latest from JFrog Platform :

Gain Clarity on Cloud Usage with Enhanced Monitoring from MyJFrog