JFrog @jfrog

Anthropic just launched a free OSS Scanner powered by frontier AI models like Claude Mythos to find vulnerabilities and generate candidate patches. The implication? Vulnerability discovery is no longer the hardest problem in AppSec—remediation is. When machines find flaws at scale, human triage cannot keep up. 👉🏽 Full breakdown on what this means for downstream software supply chains: bit.ly/4dJB3EL #AI #GenerativeAI #Anthropic #Claude #AISecurity #SoftwareEngineering

Attackers can now chain vulnerabilities into working exploits in seconds, while your developers use agents to ship code at the same speed. At @github Universe, Ronen Lewit, VP Strategics and Field CTO at JFrog, will show how JFrog and GitHub help you: → Immunize and trust your agentic workforce → Automatically heal your software supply chain → Automate compliance as part of the development process 📍 Wednesday, October 28 | 11:50 AM-12:05 PM | Gateway Pavilion Add the session to your agenda: bit.ly/4jdb9g9 #GitHubUniverse #SoftwareSupplyChain #AIAgents #DevSecOps

Struggling to prove software supply chain ROI to finance or executive leadership? 📊 The JFrog Business Value Center turns dev logs into clear business metrics - showing cost savings, hours reclaimed, and risk reduction in real time! 🛡️⚡ No spreadsheets or guesswork needed. Show clear, auditable proof of your platform's impact. 🚀 Learn more: bit.ly/3U5sIoj #SoftwareSupplyChain #DevOps #CyberSecurity #JFrog #ITROI #TechLeadership

Speed alone does not create software that is secure, reliable, or maintainable. Join Tom Howlett from @SonarSource at #swampUP Europe in Barcelona for a practical session on AC/DC: the Agent Centric Development Cycle. Learn how to build an AI-enabled software factory that moves at agentic speed without sacrificing enterprise quality or control. Join the swampUP waitlist: bit.ly/4mEpVuk #swampUP #DevSecOps #AI #AgentSecOps #TrustedIntelligence

What a way to spend an afternoon in Dallas! 🐸 JFrog DevSecOps Untapped, brought to you in partnership with AWS, drew DevOps, Platform Engineering, DevSecOps, and Security leaders for an afternoon focused on how to build trust into the AI-driven software supply chain. Live demos, candid Q&A, and plenty of hallway conversations kept things lively. Thank you to Capital One for opening up their campus and being such gracious hosts, and to everyone who joined us. Already looking forward to the next one! #JFrog #AWS #DevSecOps #SoftwareSupplyChain #PlatformEngineering #DevOps #AI #Security #Dallas

keyboard_arrow_left Previous keyboard_arrow_right Next

Congratulations to Yvonne Wassenaar, a member of JFrog’s Board of Directors, on being named NACD’s Private Company Director of the Year as part of the 2026 Directorship 100! This honor reflects the deep governance expertise and strategic insight she brings to every boardroom, including ours. Well deserved, Yvonne! #NACD #BoardLeadership #CorporateGovernance

⏰ Frontier AI is shrinking the window between vulnerability disclosure + exploitation. Can your team answer "Are we affected?" in hours, not days? Canada's new Treasury Board SPIN says federal departments must maintain an SBOM for department-developed software that supports critical services. Canadian government + public sector teams, join Paul Davis + Lester Wong of DCI on October 20 at 8am PT / 11am ET to put that inventory to work: faster response + stopping risky components before they reach your build. Calling #CanadianPublicSector, #Security + #DevSecOps teams. 🔗 Save your spot: bit.ly/4hLFTSW

AI agents now write, review, and ship code autonomously. But because agent sessions are ephemeral, traditional SDLC governance is breaking down. Introducing the Agentic Process Evidence Protocol: an open standard designed to capture, attest, and verify AI agent actions across your software pipeline. Highlights: 🔹 Cryptographically signs agent session logs to commits & releases 🔹 Enforces policy-as-code before production promotion 🔹 Satisfies EU AI Act & OWASP AISVS logging requirements Learn how JFrog AppTrust brings continuous compliance to the Agentic SDLC: bit.ly/4i4Ly71

AI agents are writing more code than ever. Across 30M+ pull requests, CodeRabbit saw volume grow 4x in a year while review rounds per change fell by a fifth, so more code is shipping with less scrutiny. At #swampUP Europe, Aleks Volochnev of @coderabbitai shares how to close that gap and he’ll show how an independent review layer checks every change, whether a person or an agent wrote it. Then he’ll follow one agent-written change through JFrog Artifactory, Curation, and AppTrust, from review to build to promotion, with its evidence attached. Save your spot: swampup.jfrog.com #AgenticAI #DevSecOps #DevGovOps #SoftwareSupplyChain

GenAI can write code faster than any team can review it, and that speed means nothing if you can’t trust what ships. At #swampUP Europe, Admiral’s Owen Delaney and Wessley McInroy will show how they moved beyond AI experimentation to a fully governed #SDLC, using JFrog as the system of record for trust, traceability, and flow from prompt to production. This is a real-world look at scaling #AI the right way: fast for developers, safe for the business. Register today: bit.ly/47y8JBI

How does a major bank secure its #softwaresupplychain when #AI is making threats faster and regulations like #DORA keep raising the bar? At swampUP Europe, Truc Vu Kuyper, Chief Product Owner at SEB, shares how SEB is tackling it. "SEB's Technical Transformation: Securing the Supply Chain" covers the challenges SEB faces across a complex enterprise landscape, what the team has done so far, and where they're headed next with JFrog Curation and other security solutions. Built for transformation leaders, architects, and project managers. 📍 Barcelona | Oct 20-22 Save your spot → bit.ly/47y8JBI #DevSecOps #DevGovOps

Zero pit stops. Zero rate limits. 🏁 The fastest thing about your CI/CD pipeline shouldn't be how quickly it hits a rate limit. JFrog Cloud Pro gives your team unlimited Docker pulls, 99.9% uptime SLA, and zero throttling — so nothing slows you down between commit and production. $50/month through the end of race season. Plus $200 in AWS credits for new signups. Start your engine: bit.ly/4zndpGj #F1 #DevGovOps #SoftwareSupplyChain #AI

Your #AI agents ship code faster than your team can review it. JFrog will be at @github Universe on October 28-29 in San Francisco, and we’ll show you how to keep agents moving fast without losing control. Developers use agents to write code, while attackers use frontier AI to chain CVEs into bigger exploits. No human team can verify every artifact and AI asset at that pace, so trust has to be built into the #SoftwareSupplyChain itself. Book a meeting with the JFrog team: bit.ly/4jdb9g9 #GitHubUniverse #AIAgents #DevSecOps

Overly broad permissions and messy access controls put your software delivery pipeline at risk. 🛠️ The fix: centralized, structured control that doesn’t slow developers down. Our JFrog Security & Permission Management course covers: 🔐 Security Basics (Beginner): Central security settings and core access principles. 👥 Permission Management (Beginner+): Users, groups, and precise permissions for least-privilege control. Start securing your #DevOps environment with confidence. 👉 Enroll now: bit.ly/3TT2jdh

One poisoned pip package can sink an AI agent before it ships. 👉🏽 Join JFrog experts, Arik Yakir and Eldad Assis, at #swampUP Europe where we'll show you how to stop it. "Trusted AI Delivery at Scale" shows how one build command sends your agent through three automated gates: JFrog Curation, Artifactory, and Xray. If a vulnerable dependency slips in, the pipeline stops and the agent never ships. Only a clean build reaches Amazon ECR and goes live on Amazon Bedrock AgentCore. 📍 Barcelona | Oct 20-22 Save your spot: bit.ly/47y8JBI #AISupplyChain #DevSecOps #AWS

🔎 Is your SBOM delivering real security value, or just checking a compliance box? For Canadian federal departments, it's now a requirement. Canadian government + public sector teams: join JFrog Field CISO Paul Davis and Lester Wong, Cybersecurity/AI Specialist at DCI to learn how to turn SBOM data into faster vulnerability response, stronger provenance, and a shorter path to ATO. 🔗 The Treasury Board's new SPIN directs departments to maintain an SBOM for department-developed software that supports critical services, so make sure to get ahead and register now: bit.ly/4hLFTSW #PublicSector #CanadianGovernment #Security #SoftwareSupplyChain

Your #AI agents are pulling MCPs, installing skills, and shipping code. Do you know where any of it came from? At swampUP Europe, Yossi Shaul (SVP & GM, Artifactory & System of Record) and Ran Romano (VP, Product & Engineering) show how to go from "nobody knows" to full control. It's the same #softwaresupplychain trust you already count on, extended to every asset your agents pull and every line of code they write. Learn how by registering for #swampUP Europe today: bit.ly/47y8JBI

Our JFrog CLI course takes you from setup to advanced artifact & binary management, with security scanning built right into your workflow. Stop juggling tools and manual checks. Speed and security both live in your terminal. 🚀 From CLI basics to advanced release automation, level up your DevOps game today. Enroll now: bit.ly/4AvdAB1

Automated AI agents are producing code faster than ever - and swelling vulnerability backlogs at 10x the previous rate! Modern threat actors are now chaining low-severity flaws together in minutes. In this Cybersecurity Awareness Month briefing, JFrog Field CISO Paul Davis shares key insights about rising CISO liability in the age of LLM models, the SolarWinds breach and why continuous software governance is crucial in the AI-Era. Read more: bit.ly/4z3CkPg #Cybersecurity #DevSecOps #AISecurity #SoftwareSupplyChain #CISO

Congratulations to @elisasteele, member of JFrog's Board of Directors, on being named to the NACD Directorship 100! This recognition reflects the sharp judgment and governance excellence she brings to every boardroom she's part of, including ours. Well deserved, Elisa! #NACD