The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

JFrog proposes DevGovOps — continuous governance, auditability and cryptographic traceability embedded in delivery pipelines — as the discipline needed to close the DORA and CRA compliance gap.

swampUP 2025 recap: AI is driving a 'quantum shift' in software delivery — 30% of code at Microsoft and Google is AI-generated — and JFrog answers with a unified platform and six new innovations.

With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…

An overview of the SLSA framework's Build Levels 1-3, signed build provenance from CI/CD platforms, PEP 740 bringing SLSA provenance to PyPI, and how consumers can verify artifact origins.

Wiz MCP agent integrations now let partner AI agents pull live Wiz context—Issues, findings, attack paths—on demand from customer tenants, with the WIN partners endpoint GA for building integrations.

DGrid routes requests across 200+ AI models using onchain identities, x402 payments, and Proof of Quality ratings. By July 2026, 96 models had multiple provider routes enabling failover.