Skip to main content

JFrog Architecture

Overview

The JFrog Platform is an end-to-end DevOps/DevSecOps/DevGovOps/MLOps platform that powers software supply chain management. It provides a unified experience for managing your entire software release flow, from development to distribution to production.

If you are deciding how to deploy, start with Choosing an Architecture. That page walks SaaS versus self-managed, single site versus multi-site, high availability, and sizing.

Core Components

The JFrog Platform provides solutions in the following areas

DevOps

Package management, CI/CD, and release management

DevSecOps

End-to-end security natively where your code and artifacts live.

  • JFrog Xray - Code and binary level software composition analysis
  • JFrog Curation - Defend your software supply chain with a “package firewall” for third party OSS packages
  • JFrog Advanced Security - Advanced application security testing with contextual analysis
  • JFrog Catalog - Centralized OSS and CVE catalog with security and risk insights
  • JFrog Runtime - Runtime security and compliance for Kubernetes production environments
  • Source Code - Shift-left security and compliance for source code

DevGovOps

Control governance, risk, and compliance as part of your DevOps lifecycle

  • JFrog AppTrust - Ensuring trusted, secure, and compliant application releases

AI/ML

All-in-one solution to build, deploy, manage and monitor all your AI workflows, from GenAI and LLMs to classic ML

  • JFrog ML - Tools, integrations, environments, and out-of-the box approach needed for successful AI/ML development
  • JFrog AI Catalog - Central hub for discovering, governing, and accessing AI models

Platform Architecture

The diagram below illustrates how these components work together to form a comprehensive DevOps platform: JFrog Architecture JFrog Architecture

Key Architectural Benefits

  • Unified Management - Single pane of glass for all DevOps, DevSecOps, Machine Learning and AI operations
  • Scalable Design - Microservices-based architecture with high availability
  • Enterprise Ready - Support for multi-site architecture and disaster recovery requirements
  • Security First - Built-in security controls and vulnerability scanning
  • API Driven - RESTful APIs for automation and integration

Learn More

Start with Choosing an Architecture to match a documented use case, then go to the JFrog Platform’s official website to learn more about the single source of truth for your software supply chain.