JFrog

Founded by Boaz Bachar in 2008

Manage build artifacts, scan dependencies for vulnerabilities, and secure package distribution to production

Pricing model

Paid

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use JFrog to manage and secure binary packages, dependencies, and container images across your development pipeline. It serves as a central repository for storing build artifacts from different programming languages and package managers. You can scan code dependencies for known security vulnerabilities and compliance issues before deployment. JFrog also allows teams to govern AI models, agent skills, and plugins used by coding assistants. By tracking every artifact from build to release, it ensures consistent, traceable, and protected deployments to servers, cloud environments, and connected devices.

What JFrog does

Host and manage universal package repositories for development teamsScan build artifacts for known security vulnerabilities and compliance risksEnforce security policies on AI models and agent pluginsTrace software artifacts from initial code commit to final deploymentDistribute binary packages securely to distributed servers and edge systemsAutomate package remediation by swapping vulnerable libraries with patched versionsUniversal binary artifact storage supporting npm, Docker, PyPI, and moreAutomated vulnerability and license compliance scanning for open-source componentsGovernance and registry for AI models, plugins, and coding agent skillsZero-touch automated patching to replace vulnerable packages with secure versionsGlobal artifact replication and federation across distributed data centersIntegration with popular AI coding assistants to enforce security policies natively