Welcome to the JFrog Blog

Latest:

Extending the Single Source of Truth to the Agentic Software Supply Chain

September 2, 2026 The JFrog Team

15 min read

Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That's exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the…

Read More

All Blogs

Live From the Show Floor: swampUP 2026

Live From the Show Floor: swampUP 2026

September 2, 2026 The JFrog Team | 34 min read

Live updates from this event have concluded. swampUP 2026 is officially LIVE in New York City! Three days, one stage, one mission: rebuild trust for a software supply chain that increasingly ships itself. Keynote updates land here as they happen, September 1–3, 2026. Let’s go! Conference Day 2, September 3rd [11:00 a.m.] The Great Model…
Read More
DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipeline

DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipeline

September 2, 2026 Roy Goldenberg, JFrog Product Marketing Manager, AppTrust | 6 min read

For decades, proving compliance meant having a person behind every decision - an engineer who remembered the approval, an auditor who could call someone and get an answer. That model worked because humans wrote, reviewed, and shipped every line of code. When agents do it instead, that dependency breaks. And so does your ability to…
Read More
The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development

The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development

September 2, 2026 Guy Eshet, Senior Manager, Product Management | 8 min read

In a single morning, a coding agent can pull an open-source model, connect to an unvetted MCP server, and execute a code-optimizing skill from the web. In the rush toward agentic automation, these AI assets quietly bypass traditional security reviews, creating new attack vectors across the software supply chain. Closing this blind spot has been…
Read More
Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessment

Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessment

August 27, 2026 Lital Hadad, JFrog GRC Manager | 5 min read

JFrog has reached a major milestone: An IRAP assessment at the Protected level, across the full JFrog Platform. Conducted by CyberCX, an Australian Signals Directorate (ASD)-endorsed assessor, against the ISM, it independently validates that the platform managing an agency’s software supply chain meets the bar for Australia’s most sensitive workloads. It reasserts a commitment that…
Read More
Coding Agents Just Reopened Your Software Supply Chain Blind Spot

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

August 25, 2026 Yonatan Philip, JFrog Senior Product Manager | 6 min read

Most organizations spent years hardening their software supply chain. The model is familiar: dependencies flow through a controlled repository, policies determine what is allowed, scanning catches what slips through, and every action is logged for auditability. It works because human developers operate within environments that enforce these rules. AI coding agents break that assumption entirely.…
Read More
Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

August 21, 2026 Carmit Hershman, JFrog Senior Software Architect, CTO Office Dan Cohen, AWS Senior Solutions Architect | 19 min read

  Join us at swampUP New York, September 1-3, for our joint session Trusted AI Delivery at Scale: Securing Every Artifact from Curation to Cloud, where we walk the full chain of custody from the moment a package enters your organization to the moment your agent runs on Amazon Bedrock AgentCore. Register here. AI agents…
Read More
Frontier AI Application Security: Every Second Counts

Frontier AI Application Security: Every Second Counts

August 18, 2026 Matan Libis, JFrog Director of Product for Application Security | 8 min read

Somewhere in the last few months, the math of application security quietly broke. Anthropic's Claude Mythos Preview didn't just analyze code, it found a 27-year-old vulnerability in OpenBSD, a 16-year-old bug in FFmpeg, and a 17-year-old remote code execution flaw in FreeBSD, entirely on its own. Then it went further: it built working exploits for…
Read More

Popular Tags