Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform powers organizations to build, manage, and distribute software quickly & securely

🌎
Joined May 2009
We're proud to sponsor @JFrog swampUP in Barcelona! Visit us at the CloudBees booth to learn how we can help make sure the code you write delivers the business impact you want — safely and securely. See the CloudBees events calendar for details: cloudbees.com/events?Product…
1
1
321
What does it take to rebuild trust after one of the most infamous #SoftwareSupplyChain attacks in history? Former SolarWinds CISO Tim Brown sat down with JFrog Field CISO Paul Davis at #swampUP 2026 to share how his team responded to Sunburst, fought SEC charges for years, and rebuilt their pipeline with a three-stage build process where only 2 people can access production. This #CyberSecurityAwarenessMonth, his lessons on assuming breach, securing non-human identities, and partnering with your security team are a must-read for every #developer, #DevOps, and #DevSecOps leader. Get the full conversation here: bit.ly/3UD9h6q
180
🚀 Models, datasets + AI-generated code are now dependencies too. You can't secure what you can't see. That's the thinking behind the Treasury Board's new SPIN on cyber security readiness in the frontier AI era. It says federal departments must maintain an SBOM for department-developed software that supports critical services. Built for Canadian government + public sector teams: join JFrog Field CISO Paul Davis + Lester Wong, Cybersecurity/AI Specialist at DCI, on October 20 at 8am PT / 11am ET for "From Inventory to Action: Putting SBOMs to Work." If you're in #AISecurity, #PublicSector, or #SoftwareSupplyChain, tune in. 🔗 Register now: bit.ly/4hLFTSW
4
205
Anthropic just launched a free OSS Scanner powered by frontier AI models like Claude Mythos to find vulnerabilities and generate candidate patches. The implication? Vulnerability discovery is no longer the hardest problem in AppSec—remediation is. When machines find flaws at scale, human triage cannot keep up. 👉🏽 Full breakdown on what this means for downstream software supply chains: bit.ly/4dJB3EL #AI #GenerativeAI #Anthropic #Claude #AISecurity #SoftwareEngineering
1
3
416
Attackers can now chain vulnerabilities into working exploits in seconds, while your developers use agents to ship code at the same speed. At @github Universe, Ronen Lewit, VP Strategics and Field CTO at JFrog, will show how JFrog and GitHub help you: → Immunize and trust your agentic workforce → Automatically heal your software supply chain → Automate compliance as part of the development process 📍 Wednesday, October 28 | 11:50 AM-12:05 PM | Gateway Pavilion Add the session to your agenda: bit.ly/4jdb9g9 #GitHubUniverse #SoftwareSupplyChain #AIAgents #DevSecOps
1
200
Struggling to prove software supply chain ROI to finance or executive leadership? 📊 The JFrog Business Value Center turns dev logs into clear business metrics - showing cost savings, hours reclaimed, and risk reduction in real time! 🛡️⚡ No spreadsheets or guesswork needed. Show clear, auditable proof of your platform's impact. 🚀 Learn more: bit.ly/3U5sIoj #SoftwareSupplyChain #DevOps #CyberSecurity #JFrog #ITROI #TechLeadership
1
227
Speed alone does not create software that is secure, reliable, or maintainable. Join Tom Howlett from @SonarSource at #swampUP Europe in Barcelona for a practical session on AC/DC: the Agent Centric Development Cycle. Learn how to build an AI-enabled software factory that moves at agentic speed without sacrificing enterprise quality or control. Join the swampUP waitlist: bit.ly/4mEpVuk #swampUP #DevSecOps #AI #AgentSecOps #TrustedIntelligence
1
2
305
What a way to spend an afternoon in Dallas! 🐸 JFrog DevSecOps Untapped, brought to you in partnership with AWS, drew DevOps, Platform Engineering, DevSecOps, and Security leaders for an afternoon focused on how to build trust into the AI-driven software supply chain. Live demos, candid Q&A, and plenty of hallway conversations kept things lively. Thank you to Capital One for opening up their campus and being such gracious hosts, and to everyone who joined us. Already looking forward to the next one! #JFrog #AWS #DevSecOps #SoftwareSupplyChain #PlatformEngineering #DevOps #AI #Security #Dallas
1
321
Congratulations to Yvonne Wassenaar, a member of JFrog’s Board of Directors, on being named NACD’s Private Company Director of the Year as part of the 2026 Directorship 100! This honor reflects the deep governance expertise and strategic insight she brings to every boardroom, including ours. Well deserved, Yvonne! #NACD #BoardLeadership #CorporateGovernance
233
⏰ Frontier AI is shrinking the window between vulnerability disclosure + exploitation. Can your team answer "Are we affected?" in hours, not days? Canada's new Treasury Board SPIN says federal departments must maintain an SBOM for department-developed software that supports critical services. Canadian government + public sector teams, join Paul Davis + Lester Wong of DCI on October 20 at 8am PT / 11am ET to put that inventory to work: faster response + stopping risky components before they reach your build. Calling #CanadianPublicSector, #Security + #DevSecOps teams. 🔗 Save your spot: bit.ly/4hLFTSW
177
AI agents now write, review, and ship code autonomously. But because agent sessions are ephemeral, traditional SDLC governance is breaking down. Introducing the Agentic Process Evidence Protocol: an open standard designed to capture, attest, and verify AI agent actions across your software pipeline. Highlights: 🔹 Cryptographically signs agent session logs to commits & releases 🔹 Enforces policy-as-code before production promotion 🔹 Satisfies EU AI Act & OWASP AISVS logging requirements Learn how JFrog AppTrust brings continuous compliance to the Agentic SDLC: bit.ly/4i4Ly71
2
3
2
3
356
AI agents are writing more code than ever. Across 30M+ pull requests, CodeRabbit saw volume grow 4x in a year while review rounds per change fell by a fifth, so more code is shipping with less scrutiny. At #swampUP Europe, Aleks Volochnev of @coderabbitai shares how to close that gap and he’ll show how an independent review layer checks every change, whether a person or an agent wrote it. Then he’ll follow one agent-written change through JFrog Artifactory, Curation, and AppTrust, from review to build to promotion, with its evidence attached. Save your spot: swampup.jfrog.com/ #AgenticAI #DevSecOps #DevGovOps #SoftwareSupplyChain
1
4
459
GenAI can write code faster than any team can review it, and that speed means nothing if you can’t trust what ships. At #swampUP Europe, Admiral’s Owen Delaney and Wessley McInroy will show how they moved beyond AI experimentation to a fully governed #SDLC, using JFrog as the system of record for trust, traceability, and flow from prompt to production. This is a real-world look at scaling #AI the right way: fast for developers, safe for the business. Register today: bit.ly/47y8JBI
283
How does a major bank secure its #softwaresupplychain when #AI is making threats faster and regulations like #DORA keep raising the bar? At swampUP Europe, Truc Vu Kuyper, Chief Product Owner at SEB, shares how SEB is tackling it. "SEB's Technical Transformation: Securing the Supply Chain" covers the challenges SEB faces across a complex enterprise landscape, what the team has done so far, and where they're headed next with JFrog Curation and other security solutions. Built for transformation leaders, architects, and project managers. 📍 Barcelona | Oct 20-22 Save your spot → bit.ly/47y8JBI #DevSecOps #DevGovOps
2
335
Zero pit stops. Zero rate limits. 🏁 The fastest thing about your CI/CD pipeline shouldn't be how quickly it hits a rate limit. JFrog Cloud Pro gives your team unlimited Docker pulls, 99.9% uptime SLA, and zero throttling — so nothing slows you down between commit and production. $50/month through the end of race season. Plus $200 in AWS credits for new signups. Start your engine: bit.ly/4zndpGj #F1 #DevGovOps #SoftwareSupplyChain #AI
203
Your #AI agents ship code faster than your team can review it. JFrog will be at @github Universe on October 28-29 in San Francisco, and we’ll show you how to keep agents moving fast without losing control. Developers use agents to write code, while attackers use frontier AI to chain CVEs into bigger exploits. No human team can verify every artifact and AI asset at that pace, so trust has to be built into the #SoftwareSupplyChain itself. Book a meeting with the JFrog team: bit.ly/4jdb9g9 #GitHubUniverse #AIAgents #DevSecOps
207
Overly broad permissions and messy access controls put your software delivery pipeline at risk. 🛠️ The fix: centralized, structured control that doesn’t slow developers down. Our JFrog Security & Permission Management course covers: 🔐 Security Basics (Beginner): Central security settings and core access principles. 👥 Permission Management (Beginner+): Users, groups, and precise permissions for least-privilege control. Start securing your #DevOps environment with confidence. 👉 Enroll now: bit.ly/3TT2jdh
179
One poisoned pip package can sink an AI agent before it ships. 👉🏽 Join JFrog experts, Arik Yakir and Eldad Assis, at #swampUP Europe where we'll show you how to stop it. "Trusted AI Delivery at Scale" shows how one build command sends your agent through three automated gates: JFrog Curation, Artifactory, and Xray. If a vulnerable dependency slips in, the pipeline stops and the agent never ships. Only a clean build reaches Amazon ECR and goes live on Amazon Bedrock AgentCore. 📍 Barcelona | Oct 20-22 Save your spot: bit.ly/47y8JBI #AISupplyChain #DevSecOps #AWS
1
1
268
🔎 Is your SBOM delivering real security value, or just checking a compliance box? For Canadian federal departments, it's now a requirement. Canadian government + public sector teams: join JFrog Field CISO Paul Davis and Lester Wong, Cybersecurity/AI Specialist at DCI to learn how to turn SBOM data into faster vulnerability response, stronger provenance, and a shorter path to ATO. 🔗 The Treasury Board's new SPIN directs departments to maintain an SBOM for department-developed software that supports critical services, so make sure to get ahead and register now: bit.ly/4hLFTSW #PublicSector #CanadianGovernment #Security #SoftwareSupplyChain
2
323
Your #AI agents are pulling MCPs, installing skills, and shipping code. Do you know where any of it came from? At swampUP Europe, Yossi Shaul (SVP & GM, Artifactory & System of Record) and Ran Romano (VP, Product & Engineering) show how to go from "nobody knows" to full control. It's the same #softwaresupplychain trust you already count on, extended to every asset your agents pull and every line of code they write. Learn how by registering for #swampUP Europe today: bit.ly/47y8JBI
1
291