JFrog (FROG) SwampUP 2026 summary

Key announcements and themes

• Emphasis on protect, remediate, and control as guiding principles for software supply chain security in the AI era.

• Launch of Package Traffic Controller to enforce secure package management, with integrations to SASE partners like Zscaler and Netskope.

• Expansion of Artifactory to support new asset types such as MCP, models, and skills, positioning it as the central hub for AI-driven development.

• Integration with Wiz to extend security into runtime environments, enhancing vulnerability remediation capabilities.

• AppTrust adoption for continuous compliance, driven by regulatory requirements like the EU Cyber Resilience Act.

Customer insights and DevGovOps evolution

• Keysight Technologies highlighted the need to automate compliance and governance to keep pace with accelerated software and AI development.

• Manual compliance processes were identified as a bottleneck, leading to the adoption of AppTrust for artifact and compliance management.

• Governance is becoming standard for all applications, not just high-risk ones, as automation reduces R&D burden.

• Regulatory deadlines, such as October of next year, are accelerating the adoption of automated governance solutions.

• The goal is to eliminate trade-offs between compliance and innovation speed through integrated tooling.

Product roadmap and market positioning

• Artifactory is evolving from a system of record to a system of trust, central to both traditional and AI-driven software supply chains.

• The future focus is on managing binaries as the main currency of software, with agents and automation driving increased binary creation.

• JFrog is integrating agentic repository capabilities and advanced metadata management into its core platform.

• Differentiation is built on universality, scalability, open source support, and long-term retention for regulated industries.

• Partnerships and integrations with leading AI labs and security vendors reinforce JFrog’s infrastructure role.