JFrog Named a Leader in the Inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security

With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…

AI agents commit code no human wrote, leaving no trace in the pipeline; JFrog AppTrust's Prompt to Release Traceability collects and signs the commits, PRs, tickets, and approvals per release.

Why every new compliance framework restarts the same audit fire drill, and how JFrog AppTrust converts frameworks like NIST SSDF and the EU CRA into policies that run with every release.

Gartner names JFrog a Visionary in the 2025 Magic Quadrant for Application Security Testing, highlighting AppTrust, agentic remediation via GitHub Copilot and Curation for IDE extensions.

The excitement is building. JFrog is pleased to announce the awesome agenda we have assembled for swampUP 2024 at the Omni Barton Creek Resort & Spa in Austin. Join us Sep 9-11 for one of the premier DevOps conferences of the year, focusing on the latest trends in software development platforms, supply chain security, OSS…

Developers simply want to write code without interruption, while operations wish to build as fast as possible and deploy without restrictions. On the other hand, security professionals want to protect every step of the software supply chain from any potential security threats and vulnerabilities. In software development, every piece of code can potentially introduce vulnerabilities…