JFrogFROG

JFrog released new tools designed to help large companies track whether the software and AI models they build follow internal rules and government regulations. These features, which the company calls DevGovOps, automate the process of checking software building blocks for compliance as they move through the development cycle. This is a logical step for the company because it already stores the files these businesses use. By adding compliance checks directly into that storage, JFrog makes its platform more difficult to replace and gives customers a reason to spend more on its security and management tools.

Source: Business Wire

JFrog released a new feature that automatically finds and fixes security holes in a company's software supply chain. In modern software, developers use thousands of pre-made building blocks called binaries. If one of those blocks has a security flaw, it can put the whole application at risk.

This update matters because it moves JFrog from just storing these blocks to actively protecting them. By automating the cleanup of open-source security threats, the company makes its platform more essential to big businesses. This helps support the goal of getting existing customers to spend more on security tools rather than just storage.

Source: Business Wire

JFrog is partnering with Wiz, a major cloud security firm, to share data between their two platforms. JFrog acts as the warehouse for a company's software building blocks, while Wiz scans live cloud environments for active threats. By linking them, developers can see exactly which software package in their warehouse is causing a security alert in their live apps.

This is a smart move because it makes JFrog's data more useful to the security teams who use Wiz. For a long-term owner, this partnership strengthens JFrog's position as the central source of truth for software, making it harder for customers to switch to a different storage provider.

Source: Business Wire

JFrog launched a new product called Software Supply Chain Traffic Controller. This tool acts as a single gatekeeper for all the software packages and building blocks an organization uses, ensuring they follow a trusted path from creation to use.

This matters because modern software is built using thousands of pre-made parts, which can create security risks if not tracked. By positioning itself as the central controller for these flows, JFrog makes its platform more essential to large companies and gives customers another reason to consolidate their security and development work in one place.

Source: Business Wire

The company held its annual user conference, swampUP, where it brought together industry leaders to discuss the software supply chain. This is the system of tools and processes used to build and deliver software to users. The event focused on how companies can safely deliver AI and software at a large scale. While these events help build brand awareness and connect with customers, they are routine for software companies. There was no major product news or financial update shared here that changes the long-term outlook for the business.

Source: Business Wire

Metrics we are tracking