@jfrog

Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform powers organizations to build, manage, and distribute software quickly & securely

 🌎
jfrog.com/
Joined May 2009
  • Tweets18.5K
  • Following2.3K
  • Followers23.3K
8.2KMedia
🏎️ Rate limits are the speed bumps nobody put on the map. 🙅‍♂️ Get in the fast lane and an extra $200 in AWS credits: jfrog.com/cloud-pro When your CI/CD pipeline is built for speed, your Docker Hub pulls shouldn't be what slows it down. JFrog Cloud Pro gives every team unlimited Docker pulls, zero throttling, and 99.9% uptime — so your pipeline runs as fast as your team can build. $50/month through the end of race season + new signups get $200 in AWS credits too. #CICD #DevSecOps #SoftwareSupplyChain
83
When another vulnerability makes headlines, the question is personal: what could this mean for us? It’s also a reminder to look at the security practices behind the software your organization builds and runs. This Cybersecurity Awareness Month, the JFrog Security Maturity Assessment can help you explore potential gaps in those practices. It covers 11 software supply chain security domains and provides a personalized report based on your responses, with areas to review and strengthen. Take the assessment: bit.ly/4iB7BTd #CybersecurityAwarenessMonth #SoftwareSupplyChainSecurity
120
451% = That is how much malicious packages increased in npm alone in the past year. 📈 Onstage at #swampUP in Barcelona is JFrog VP of Security Research Shachar Menashe. He’s showing how AI-powered payloads, precision phishing, and malicious AI skills have made hijacking open source packages the attacker’s highest-ROI play. The same cyber models attackers use are now being turned against them. "The bombardment of attacks begs the conclusion that major supply chain attacks are here to stay" #DevSecOps #SoftwareSupplyChain #TrustedIntelligence #AI
1
1
213
swampUP in Barcelona: JFrog VP of Product Eyal Dyment, Tyrone Gamby from Morgan Stanley, and @openso from @Broadcom showing why the traditional #DevSecOps playbook of scan, alert, and manually patch can no longer keep up. The new world requires pre- and post-release defenses anchored on a single system of record. With Frontier AI models now discovering and chaining software vulnerabilities at machine speed, attackers will have access to the same capabilities. Our speakers discuss how they reinforce security in this new AI reality. #swampUP #SoftwareSupplyChain #TrustedIntelligence #ZeroTouchRemediation
2
3
283
Sovereignty is not just about where your data lives. It is about who decides what your AI agents ship. On stage at #swampUP in Barcelona: @AmitEyalGovrin, CEO and Co-Founder of Agentcy Labs, is on stage running a live assessment of AI agents against the Five Pillars of Sovereign AI framework. The release gate is where control is truly proven, not the data center. #AISovereignty #DevGovOps #TrustedIntelligence #AI #AgentSecOps
1
203
We are back and live in Barcelona for day 2 of #swampUP 2026. 🐸🇪🇸 JFrog Director of Product, Ronny Belenitsky, is on stage showing why the compliance illusion has to end. Agents are committing code, opening PRs, and deploying to production in minutes with no humans in the loop. When auditors arrive, there is no one to ask, no memory, and no evidence. “How can it be that we are safe if our compliance tools are not matching the speed at which we are releasing?” JFrog AppTrust makes compliance a byproduct of how software ships, not a checkpoint bolted on after. #DevGovOps #DevSecOps #TrustedIntelligence #Compliance
2
200
Day 1 of #swampUP Europe 2026 in Barcelona was one for the books. 🐸🇪🇸 The keynotes were sharp and the sessions were packed. From closing the Shadow AI blind spot with Local Shadow AI Detection and JFrog AI Security, to ending the audit scramble with new #DevGovOps capabilities that give CISOs and R&D leaders signed compliance evidence for every release. The conversations on stage and in the hallways made one thing clear: the rules of trust in the #AI era are being rewritten right now, and this community is at the forefront of it. Barcelona is not done with swampUP yet - we'll see you for Day 2! 🐸 #DevSecOps #DevGovOps #TrustedIntelligence #SoftwareSupplyChain
4
321
🚨LiteLLM hijacked again: version 1.107.0. PHP for breakfast, Python for lunch! ☕ The JFrog Security Research team discovered a PyPI package hijack affecting LiteLLM (23M weekly downloads). All seven PyPI wheels carry files that run on package install time, steal credentials and open an hourly remote-code channel, even if your app never imports litellm. The hijack also affected LiteLLM's official Docker Hub images, with the same payload. If it's anywhere in your environment, don't start clean-up by running pip. Starting Python can re-trigger a payload that steals credentials and runs at interpreter startup. The JFrog Security Research team has detailed the attack, the indicators of compromise and the remediation steps. Read our blog for full details: jfrog.co/3TOtgPp #DevOps #PyPI #SoftwareSupplyChain #Cybersecurity
A dark blue graphic with the text "LiteLLM Hijacked Again" and "Learn More" on a green button. To the right, there is an illustration of a syringe injecting orange liquid into a glass vial with the Python logo. The bottom left shows the JFrog logo.

ALT A dark blue graphic with the text "LiteLLM Hijacked Again" and "Learn More" on a green button. To the right, there is an illustration of a syringe injecting orange liquid into a glass vial with the Python logo. The bottom left shows the JFrog logo.

1
1
4
6
675
Are AI assets bypassing your security gates? 🚨 A ZIP file in Slack or an unvetted MCP server can introduce hidden Shadow AI risks right on your developers’ workstations. With JFrog AI Security, you can now detect skills, plugins, and MCP servers, where coding agents actually run—without slowing down your team. 🛡️ Get full visibility across managed and local AI assets! 👉🏽 Learn more: bit.ly/4yC5moy #ShadowAI #DevSecOps #AISecurity #AppSec #SoftwareSupplyChain
A digital illustration features a laptop displaying cartoon robots on the screen. The text reads, "Detect AI Running Outside Your Software Supply Chain." A "Learn More" button is visible. JFrog logo is in the bottom left corner.

ALT A digital illustration features a laptop displaying cartoon robots on the screen. The text reads, "Detect AI Running Outside Your Software Supply Chain." A "Learn More" button is visible. JFrog logo is in the bottom left corner.

1
240
🚨 AppSec alert: SCA and SAST check code paths, but agent skills, plugins & APM packages ship INSTRUCTIONS directly to coding agents! 🤖 Blind spot: Plain-text prompt injections & credential theft can pass "safe." JFrog bridges this gap with JFrog AI Security’s intent-based semantic scanning & runtime enforcement - keeping your AI supply chain secure under one roof. 🛡️ Learn more: bit.ly/4ytEmHB #DevSecOps #AppSec #AISecurity #CyberSecurity #SoftwareSupplyChain
Image of a digital illustration featuring a futuristic scanning device on a conveyor belt, analyzing cubes with red elements inside. The text reads "AI Asset Scanning: Detect Malicious Intent." The JFrog logo is visible at the bottom left. A "Learn More" button is present on the left side.

ALT Image of a digital illustration featuring a futuristic scanning device on a conveyor belt, analyzing cubes with red elements inside. The text reads "AI Asset Scanning: Detect Malicious Intent." The JFrog logo is visible at the bottom left. A "Learn More" button is present on the left side.

3
248
🚨How to Safeguard Your Systems From PHP2Shell Impact PHP has scheduled the security release today (October 21) at 14:00 UTC ⚠️ CVE-2026-109618 and CVE-2026-109619 both score 9.2 (CVSS v4.0) and are reported to allow remote code execution. Our blog covers how to get ready: 🔍 Inventory every PHP runtime ⚙️ Line up approvals and testing 🛡️ Check vendor advisories for backports Read the full blog 👇 jfrog.co/4ieYAPq #DevSecOps #PHP #Cybersecurity
495
JFrog Co-Founder and CTO Yoav Ladman is on the #swampUP stage in Barcelona right now, showing how software now flows continuously through streams of binaries at #AI speed. Source code is no longer the center of gravity, and coding agents are assembling releases faster than human-driven governance can track. JFrog is the trust layer built for this new reality. “Today we’re going to add three new layers to the software supply chain integral to building trust” #TrustedIntelligence #DevSecOps #SoftwareSupplyChain
A person is presenting on stage at a conference. A large screen shows slides titled "Three Layers of SSC-Ingrained Trust" with the layers "Immunize," "Remediate," and "Control." The stage is lit with green accents, and attendees are seated, watching the presentation.

ALT A person is presenting on stage at a conference. A large screen shows slides titled "Three Layers of SSC-Ingrained Trust" with the layers "Immunize," "Remediate," and "Control." The stage is lit with green accents, and attendees are seated, watching the presentation.

9
334
JFrog Co-Founder and CTO Yoav Landman is on the #swampUP Europe stage in Barcelona right now, showing how software now flows continuously through streams of binaries at #AI speed. Source code is no longer the center of gravity, and coding agents are assembling releases faster than human-driven governance can track. JFrog is the trust layer built for this new reality. “Today we’re going to add three new layers to the software supply chain integral to building trust” #TrustedIntelligence #DevSecOps #SoftwareSupplyChain
A person is presenting on stage at a conference. A large screen shows slides titled "Three Layers of SSC-Ingrained Trust" with the layers "Immunize," "Remediate," and "Control." The stage is lit with green accents, and attendees are seated, watching the presentation.

ALT A person is presenting on stage at a conference. A large screen shows slides titled "Three Layers of SSC-Ingrained Trust" with the layers "Immunize," "Remediate," and "Control." The stage is lit with green accents, and attendees are seated, watching the presentation.

1
242
#swampUP Europe 2026 is officially underway in Barcelona. 🐸🇪🇸 JFrog Co-Founder and CEO @ShlomiBenHaim is on the swampUP Europe stage right now with Ariel Assaraf from @Coralogix, unpacking how #AI is reshaping the #softwaresupplychain. Autonomous agents have moved from assistants to builders, writing code, resolving dependencies, and producing binaries at machine speed. The rules of trust are being rewritten in real time. "In order to build speed and trust, there must be a control plane in place" #swampUP #TrustedIntelligence #DevSecOps #AI
A speaker stands on stage in front of an audience, presenting at a conference with the slogan "From the Speed of Creation to the Speed of Trust" displayed on a large screen. The room is dimly lit with green accent lighting overhead. Attendees are seated and listening.

ALT A speaker stands on stage in front of an audience, presenting at a conference with the slogan "From the Speed of Creation to the Speed of Trust" displayed on a large screen. The room is dimly lit with green accent lighting overhead. Attendees are seated and listening.

181
AI agents are shipping code faster than any compliance team can review it. JFrog AppTrust just changed that. 🐸 New at #swampUP Europe in Barcelona: out-of-the-box #DORA Compliance Framework, Repo-Level Policies, and #AI Verification Policies that evaluate every release against plain-language rules and generate signed proof of compliance automatically. No more scrambling when the auditor calls. Learn more: bit.ly/4eFr2J2 #DevGovOps #CRA #Compliance #SoftwareSupplyChain #TrustedIntelligence
JFrog promotional image with a road leading to an arch labeled "Trusted Release." The road passes through signs labeled 1. Discover, 2. Verify, 3. Evidence, and 4. Report. Text reads: "JFrog Ends the Audit Scramble with New DevGovOps Capabilities." A green button says "Learn More.

ALT JFrog promotional image with a road leading to an arch labeled "Trusted Release." The road passes through signs labeled 1. Discover, 2. Verify, 3. Evidence, and 4. Report. Text reads: "JFrog Ends the Audit Scramble with New DevGovOps Capabilities." A green button says "Learn More.

2
2
211
JFrog’s new Local Shadow AI Detection extends visibility to where developers actually work: detecting #AI assets as they land on the developer’s machine, scanning on the local device, and cross-referencing every asset against what is approved in the JFrog Platform. If your security coverage starts at the repository, you are already too late. Get full visibility from laptop to production. Learn more: bit.ly/4BeKKVN #AISecurity #AgentSecOps #DevSecOps #SoftwareSupplyChain #AIGovernance #swampUP
1
171
Can you trace a production alert back to the build, the artifact, and the owner in minutes? JFrog’s David Dewaele and @wiz_io’s Annam Iyer will show you how. Nov 10, 10am PT. What you’ll see: 🔹 What’s running, who owns it, is it secure, in one view 🔹 Less alert noise with runtime context tied to binary-level lineage 🔹 Shadow deployments and pipeline bypasses caught on day one Plus a look at the path to a self-healing supply chain with JFrog AppTrust. Save your seat: bit.ly/3VZt0h4
Sure! Here’s a suitable alt text: "Webinar titled 'Closing the Gap Between Runtime and Fix: How JFrog and Wiz Integrate to Keep Pace With Frontier AI' featuring Annam Iyer from Wiz and David Deaewele from JFrog. Event on November 10th at 10am PT. Logos of JFrog, Wiz, and Google are displayed.

ALT Sure! Here’s a suitable alt text: "Webinar titled 'Closing the Gap Between Runtime and Fix: How JFrog and Wiz Integrate to Keep Pace With Frontier AI' featuring Annam Iyer from Wiz and David Deaewele from JFrog. Event on November 10th at 10am PT. Logos of JFrog, Wiz, and Google are displayed.

2
347
Broad permissions and messy access controls put your delivery pipeline at risk. Centralized, structured control gives you precise access without slowing developers down. Learn about platform security and access control with our JFrog Security & Permission Management course: ⚡️Security Basics (Beginner) Establish a strong defensive foundation by mastering central security settings and core platform access principles. ⚡️ Permission Management (Beginner+) Eliminate access chaos by creating users, structuring groups, and assigning precise permission targets to enforce least-privilege control. Stop guessing access levels and start securing your DevOps environment with confidence. Get started today: academy.jfrog.com/jfrog-arti…
Promotional image for JFrog Artifactory: Access & Permission Management. Includes the JFrog logo, tagline "Sharpen your skills with…" and a "Start Today" button. Features geometric design and JFrog Academy logo.

ALT Promotional image for JFrog Artifactory: Access & Permission Management. Includes the JFrog logo, tagline "Sharpen your skills with…" and a "Start Today" button. Features geometric design and JFrog Academy logo.

1
210
Take a look at #swampUP Europe 2026's Training Day in Barcelona! 🤩 Engineers and security teams went hands-on with JFrog experts, building the skills to transform their #softwaresupplychains into a system of record for trusted, secure software delivery in the #AI era. Now it's time to get ready for the keynotes. See you all tomorrow at 9am! 🐸 #DevSecOps #DevGovOps #TrustedIntelligence
1
4
244
Trust shouldn’t slow your agents down. At GitHub Universe on October 28-29, JFrog will show how you can secure what your #AI agents consume, control how they build and deploy, and remediate risks before software ships. Stop by the booth for a live demo, meet our experts, and create your own exclusive JFrog T-shirt. Book a meeting with the JFrog team → events.jfrog.com/github-univ… 📍See you at the Fort Mason Pavilion in San Francisco! #GitHubUniverse #SoftwareSupplyChain #AIAgents #DevSecOps
Colorful promotional image for "Meet the Frogs at Universe '26," taking place in San Francisco, CA, on October 28-29. Features a cartoon character resembling a cat with a black face and a frog character. Includes a "Book a Meeting" button and JFrog logo.

ALT Colorful promotional image for "Meet the Frogs at Universe '26," taking place in San Francisco, CA, on October 28-29. Features a cartoon character resembling a cat with a black face and a frog character. Includes a "Book a Meeting" button and JFrog logo.

1
171
Load more