Your agents are only as trustworthy as what they consume, build, and ship. JFrog governs every AI model, agent skill, MCP server, AI-generated code, and assembled artifact in a single source of truth.
Secure your entire agentic software supply chain so you can ship trusted software at your new speed.
infrastructure as code and the dependence of modern software on servers for both delivery and functionality, the integration ensures that the blind spots are minimized, and that the configuration of any possible application a customer would run is covered by automated scanning mechanisms.Read Less >
Uncover hidden misconfigurations across different stages and environments: CoGuard enables you to scan your JFrog artifacts, builds and packages for configuration files, contextualize them, and help you remediate them early in the lifecycle. You will be not only scanning for software specific misconfigurations, but also for issues causing malfunction in the interplay between the different software products you use. Finally, CoGuard helps you uncover hidden services within your containers or instances which you were not aware of.
Accelerate changes in your infrastructure and tools: Infrastructure changes, compared to code changes, happen at a much slower pace in many organizations. The reason is the uncertainty of the impact. With the CoGuard integration, any issues caused by a configuration change will be captured, allowing your teams to deploy with confidence. CoGuard also allows its users to easily create custom policies, both for third party software and for the configuration of their proprietary software. In this way, violations against documented best practices are captured alongside of misconfigurations of third party dependencies.
Secure your environments – Cloud or On-Premise: With this integration, deployments on the cloud, as well as on premise can be scanned. May it be containerized, facilitated through playbooks, or set up via the online cloud console: CoGuard can extract configurations and scan them for dangerous defaults and other errors, and supply it as evidence to the respective JFrog artifact.
Remediate easily: Our auto-remediation feature allows your developers to have fixes done automatically and presented to them for review. This saves time, and allows your team to focus more on your business goals.
CoGuard CLI GitHub Documentation
While the current scanning capabilities capture CVEs and IaC misconfigurations, this extension allows to also detect misconfigurations for software commonly deployed in your infrastructure (Postgres, Kafka, Hadoop, Cassandra, MongoDB, Redis, and many more).
CoGuard can extract your current configurations from your cloud environment, and the CLI can even find configurations within your running servers and containers. This allows you to already have the visibility into your infrastructure security posture, while enabling you to move towards an automated, infrastructure as code environment.
The average scan is done in 30s or less. Cloud snapshot extractions and scans depend on the number of different resources running on the cloud, but average out to take 20 minutes.
The evidence uploads can be performed on any other common CI/CD platform, such as Jenkins, Bitbucket pipelines, CircleCI, etc. Our team is happy to help you get set up.
Your action was successful
Please try again later
Modal Message