Welcome to the JFrog Blog

Latest:

You Can’t Trust What You Can’t Trace

April 15, 2026 Rami Pinku, Senior Product Manager, JFrog ML

8 min read

Picture this: Your security team finishes an AI vendor evaluation. The offering looks ironclad, with content filtering, output guardrails, and a stellar red-teaming report. Everyone leaves the meeting satisfied, and another governance box is checked. Six months later, a production incident hits. An AI agent, powered by a model your team "vetted," starts executing unauthorized…

Read More

All Blogs

Recap: Women in DevSecOps Fireside Chat — Leveraging AI in Software Delivery

Recap: Women in DevSecOps Fireside Chat — Leveraging AI in Software Delivery

April 9, 2026 The JFrog Team | 4 min read

In celebration of International Women's Month and the 2026 theme #GiveToGain, JFrog hosted a virtual fireside chat on March 19, 2026: Women in DevSecOps: Leveraging AI in the Software Delivery Lifecycle. Moderated by Shubha Gururaja Rao, Director of Solution Engineering at JFrog, the panel brought together two trailblazing technical leaders — Christine Tran, Head of…
Read More
Navigating DORA Compliance: Software Development Requirements for Financial Services Companies

Navigating DORA Compliance: Software Development Requirements for Financial Services Companies

April 6, 2026 Paul Garden, JFrog Partner and Industry Solutions Danny Parizada, JFrog Senior Solution Engineer | 13 min read

Note: This blog was originally published in July 2024 and updated on an annual basis. It was most recently updated in April 2026. Regulatory compliance is a common and critical part of today's rapidly evolving financial services landscape. One new regulation that EU financial institutions must adhere to is the Digital Operational Resilience Act (DORA),…
Read More
AI Models Won’t Pick Sides in the Security War. Governance and Policy Will.

AI Models Won’t Pick Sides in the Security War. Governance and Policy Will.

April 3, 2026 Shlomi Ben Haim, CEO & Co-founder, JFrog | 7 min read

Two significant software supply chain cybersecurity attacks, seven days apart, with one hundred and eighty million weekly downloads between them. The chaos from development teams to the boardroom is real. And the pace is only going to get faster. Much, much faster... On March 24, the LiteLLM Python package, the proxy through which millions of…
Read More
Governance That Ships: Embedding Policy as Code Into Your System of Record

Governance That Ships: Embedding Policy as Code Into Your System of Record

April 3, 2026 Paul Davis, Field CISO Roy Goldenberg, JFrog Product Marketing Manager | 6 min read

Proving compliance is a necessity, but in a world of tightening regulations, the path to compliance is currently paved with spreadsheets, screenshots, and manual attestations. We call this the "Audit Tax", the millions of dollars and thousands of people hours spent not just integrating security, but on proving you are handling security. With the advent…
Read More
Stop Policies From Breaking Your Builds

Stop Policies From Breaking Your Builds

March 25, 2026 Jacqueline Basil, JFrog Product Marketing Manager, Security Manish Mehra, JFrog Product Manager | 4 min read

Security policies exist to protect your software supply chain. So why do they keep breaking your builds? This is the unspoken frustration inside most DevOps and security teams today. Supply chain attacks drove 30% of external breaches in 2025 . So your security team did the right thing. They added policies to flag packages that…
Read More
9 New Innovations. One Trust Layer.

9 New Innovations. One Trust Layer.

March 18, 2026 The JFrog Team | 11 min read

The software supply chain is no longer just about shipping code, it is about managing intelligence and risk. As DevOps, DevSecOps, DevGovOps and AI/ML practices converge into a single AI-driven and increasingly agentic delivery pipeline, the demands on development and security teams have reached a new level. The platform that once managed packages and artifacts…
Read More
Survive the AI Code Blizzard: Introducing Snippet Detection

Survive the AI Code Blizzard: Introducing Snippet Detection

March 18, 2026 Dafna Zahger Bernanka, JFrog Director of Product Marketing, Security | 4 min read

In 2026, software development speed is an AI-solved problem. Yet, as AI-generated code volumes surge, organizations face a new kind of risk visibility gap. Developers are increasingly copying third-party snippets into their codebases—from both AI prompts and open-source software components—creating large security and compliance blind spots that lead to significant risks. While proven software composition…
Read More
The Dependency Dilemma: Balancing Innovation Speed with Supply Chain Resilience

The Dependency Dilemma: Balancing Innovation Speed with Supply Chain Resilience

March 11, 2026 Katie Norton, IDC, Research Manager, DevSecOps and Software Supply Chain Security | 7 min read

Sponsored by JFrog ~  Development teams are shipping faster than ever. Generative AI coding assistants, early agentic workflows, and increasingly modular architectures have compressed the distance between concept and deployment. AI-enabled innovation has become an executive mandate, and teams are expected to deliver at speed without sacrificing security or compliance. At the same time, modern…
Read More
Webinar Recap: The Context Engine – Why Consolidation is the Natural Future of AppSec

Webinar Recap: The Context Engine – Why Consolidation is the Natural Future of AppSec

March 11, 2026 The JFrog Team | 9 min read

As the software development lifecycle continues to evolve, the rise of AI is introducing both unprecedented productivity and unprecedented risk. In a recent webinar hosted by JFrog, Jens Eckels sat down with Forrester Senior Analyst Janet Worthington to discuss the state of application security (AppSec), the explosive growth of agentic software development, and why consolidating…
Read More

Popular Tags