What does JFrog sell?

JFrog sells JFrog Artifactory, JFrog Xray (SCA), JFrog Advanced Security, JFrog Curation, JFrog AI Security and JFrog Distribution. JFrog Artifactory: A repository system that manages and stores software artifacts, binaries and AI assets across the development lifecycle. JFrog Xray (SCA): Scans software and AI artifacts to identify open-source components and their known vulnerabilities. JFrog Advanced Security: Scans the software supply chain for exposures and analyses their potential impact, including secrets detection and infrastructure-as-code checks. JFrog Curation: Applies policy-based rules to control which software and AI components are allowed into a pipeline.

How does CISO Tribune file JFrog?

CISO Tribune files JFrog under Software supply chain security, with Software composition analysis, Static application security testing and Secrets detection as secondary categories.

JFrog is publicly listed on Nasdaq under the ticker FROG.

Company record · security vendor

JFrog

Where JFrog appears on the record (4)

Every page on CISO Tribune and its network that carries this company, 4 in all.

In the vendor directory (4): Software supply chain security companies: who they are and how CISOs compare them · primary category
Software composition analysis vendors · category
Static application security testing vendors · category
Secrets detection vendors · category

What the company sells

JFrog provides a software supply chain platform that manages, secures and distributes software artifacts, binaries and AI assets for development teams. JFrog Ltd. trades on the Nasdaq under the ticker FROG. The JFrog Platform combines artifact management with security features such as software composition analysis, secrets detection, SAST and infrastructure-as-code scanning to identify and remediate vulnerabilities across the supply chain. JFrog also offers AI security capabilities that govern AI models, agent skills and MCP servers used by development teams.^[1]

Categories: Software supply chain security (primary category)
Software composition analysis
Static application security testing
Secrets detection
Compare JFrog with companies in the same category
Headquarters: Not established from our sources
Founded: Not established from our sources
Ownership: Public (Nasdaq: FROG)^[2]
CISO on record: Not yet on our record. Send a verified source
Website: jfrog.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

JFrog Artifactory^[1]
A repository system that manages and stores software artifacts, binaries and AI assets across the development lifecycle.
JFrog Xray (SCA)
Scans software and AI artifacts to identify open-source components and their known vulnerabilities.
JFrog Advanced Security^[1]
Scans the software supply chain for exposures and analyses their potential impact, including secrets detection and infrastructure-as-code checks.
JFrog Curation^[1]
Applies policy-based rules to control which software and AI components are allowed into a pipeline.
JFrog AI Security^[1]
Monitors and governs AI models, agent skills, plugins and MCP servers consumed by AI agents.
JFrog Distribution^[1]
Distributes software releases securely across multiple consumption points.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of JFrog's categories, then alphabetical. A list from the record, never a ranking.

On software supply chain security, JFrog competes with Anchore, RapidFort, Socket, Archipelo, Chainguard, Red Hat, GitLab, Snyk, Arnica, GitHub Advanced Security and 11 more.
On software composition analysis, JFrog competes with Snyk, Black Duck, Mend.io, Sonatype, GitLab, Arnica, OX Security, Phoenix Security, Semgrep, Veracode and 9 more.
On static application security testing, JFrog competes with GitLab, GitHub Advanced Security, Semgrep, Veracode, Checkmarx, Kiuwan, AISLE, OpenText, Snyk, Arnica and 11 more.
On secrets detection, JFrog competes with GitGuardian, Truffle Security, GitLab, Snyk, GitHub Advanced Security, Semgrep, Legit Security and HashiCorp.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]jfrog.comJFrog · jfrog.com · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[2]DefaultJFrog Investor Relations · investors.jfrog.com · published May 7, 2026 · Tier A: the company, a regulator or a filing

Last verified November 4, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 4, 2026 from the references above.

Work for JFrog? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at JFrog. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about JFrog

What does JFrog sell?: JFrog sells JFrog Artifactory, JFrog Xray (SCA), JFrog Advanced Security, JFrog Curation, JFrog AI Security and JFrog Distribution. JFrog Artifactory: A repository system that manages and stores software artifacts, binaries and AI assets across the development lifecycle. JFrog Xray (SCA): Scans software and AI artifacts to identify open-source components and their known vulnerabilities. JFrog Advanced Security: Scans the software supply chain for exposures and analyses their potential impact, including secrets detection and infrastructure-as-code checks. JFrog Curation: Applies policy-based rules to control which software and AI components are allowed into a pipeline.
How does CISO Tribune file JFrog?: CISO Tribune files JFrog under Software supply chain security, with Software composition analysis, Static application security testing and Secrets detection as secondary categories.
Who owns JFrog?: JFrog is publicly listed on Nasdaq under the ticker FROG.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.