Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models.
- Categories
- Software supply chain and SBOM, Cloud workload and container security, Application security testing, Vulnerability management
- Based in
- Sunnyvale, United States
- Ownership
- Private
About JFrog
JFrog provides a software supply chain platform that manages, secures, and automates the delivery of software releases. It sells to development, security, and governance teams across enterprises, including over 80% of the Fortune 100, as well as public sector agencies and automotive manufacturers. The platform acts as a single source of truth for all artifacts, including binaries, packages, AI models, and agent assets. The company differentiates itself by embedding security and compliance into every stage of the software supply chain. It offers automated remediation, policy enforcement, and traceability from prompt to production. Its platform supports hybrid and multi-site deployments, integrates with many tools, and provides a 99.99% uptime SLA for SaaS customers.
Products
- JFrog ArtifactoryA universal artifact repository that stores and manages all binaries and packages.
- JFrog XrayA security scanning tool that performs deep vulnerability analysis across binaries, containers, and AI assets.
- JFrog PipelinesA CI/CD automation tool that orchestrates pipeline processes and integrates with existing tools.
- JFrog CurationA service that blocks malicious or unwanted open source components from entering the software supply chain.
- JFrog AI CatalogA catalog that inventories and governs AI models and assets across an organization.
- JFrog AppTrustA tool that captures signed evidence and traceability for releases from prompt to production.
Ownership and deals
- JFrog acquired Qwak AIReport on JFrog buying Qwak AI (opens in a new tab)
- JFrog acquired UpswiftReport on JFrog buying Upswift (opens in a new tab)
- JFrog acquired Vdoo Connected Trust for $300mReport on JFrog buying Vdoo Connected Trust (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.