JFrog Trust Certificate Program

IRAP – Information Security Registered Assessors Program

IRAP (Information Security Registered Assessors Program) is an Australian government framework, administered by the Australian Signals Directorate (ASD), for independently evaluating the security controls of cloud services and ICT systems against the Australian Government Information Security Manual (ISM).

JFrog has successfully completed the IRAP assessment at the PROTECTED classification level, reflecting our commitment to meeting Australia’s most rigorous government security standards. The assessment was conducted by CyberCX, an ASD-endorsed independent assessor, and covers the JFrog Platform end-to-end – including artifact management, vulnerability scanning, AI model governance, policy enforcement, and SBOM evidence.

Australian federal, state and territory government agencies, along with critical infrastructure operators in defence, health and finance, can request the JFrog Platform IRAP assessment report to support their own Authority to Operate (ATO) decisions.

To obtain a copy of the assessment report, please contact your JFrog account manager.

Download the JFrog IRAP Letter of Assessment – 2026

Back to offerings

Powering the Software
that Powers the World

It’s our Liquid Software vision to automatically deliver software
packages seamlessly and securely from any source to any device.

Start Free Schedule a Demo