JFrog Advanced Security Screencast
With JFrog Advanced Security, you can now intelligently deliver secure software at speed and scale with the industry’s only DevOps-centric security solution. The new advanced security solution unifies developers, operations, and security teams to safeguard the software supply chain in a holistic, hybrid, multi-cloud platform.
See how these new features and the JFrog Platform identify common, but hidden supply chain security issues that attackers use to compromise development, release, and deployment processes, with the following features:
- Container Contextual Analysis: Container image scanning to detect whether the open source software vulnerabilities detected are actually exploitable in the application – an industry first
- Exposed Secrets: Detect secrets left exposed in any containers to prevent any accidental leak of internal tokens or credentials
- Insecure use of Libraries and Services: Discover whether common OSS libraries and services are used or configured insecurely
- Infrastructure-as-Code (IaC): Scan IaC files for early detection of cloud and infrastructure misconfigurations
