When Speed Breaks Compliance: DORA in the Age of AI Agents

Enterprise software has a new author now: AI. With 25% to 40% of code now being AI-generated or assisted, autonomous coding agents are committing, building and deploying without human approval, challenging DORA’s foundational assumption that every production change is tied to an accountable human decision.

At the same time, regulators have hardened their stance. They have moved from asking “do you have a framework?” to “show me your controls operating, continuously, for the last six months.”

Financial institutions are accelerating their pipelines faster than their governance frameworks can follow, and in a DORA-supervised environment, that gap isn’t technical debt. It’s a regulatory liability.

In this session, JFrog’s Global Field CISO, Nir Peleg, will be joined by Sophie Starchenko, JFrog’s Senior Product Manager, AppTrust, for a live demo showcasing how organizations can address the gaps DORA exposes across the software supply chain, from third-party risk to change management.

What You’ll Leave With:

• The DORA Reality Check: What regulators are demanding now that DORA is enforced, and why manual compliance processes fail at AI velocity.
• The Agentic Governance Gap: Understand how AI coding agents break DORA’s accountability chain and what it takes to close it.
• Automated DORA Evidence: Discover how evidence-based policy gates physically block non-compliant software at every stage of delivery.