JFrog
JFrog (NASDAQ: FROG) provides a unified software supply chain platform that manages artifacts, AI models, and agent skills for 6,600+ enterprises including 83 Fortune 100 companies, combining DevOps, DevSecOps, and MLOps capabilities under a subscription-based, primarily enterprise field-sales go-to-market.
- Company typePublic
- Founded2008
- HeadquartersSunnyvale, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What JFrog does
JFrog Ltd. (NASDAQ: FROG), founded in 2008 in Israel and headquartered in Netanya with U.S. operations in Sunnyvale, California, operates a unified software supply chain platform that unifies DevOps, DevSecOps, and MLOps workflows around a single artifact and AI-asset repository. The platform is anchored by JFrog Artifactory, a universal repository manager supporting 60+ package types, and is complemented by JFrog Xray (software composition analysis), JFrog Advanced Security (contextual reachability analysis, SAST, secrets detection, IaC scanning), JFrog Curation (proactive malicious-package blocking), JFrog Runtime, JFrog AppTrust, JFrog Distribution, and JFrog Connect (IoT updates). In 2024 JFrog acquired Qwak AI for approximately $230 million to add MLOps, and in 2026 extended the platform with an AI governance layer — JFrog AI Catalog, JFrog MCP Registry, and JFrog Agent Skills Registry — designed to govern AI models, MCP servers, and agent skills for organizations using AI coding agents such as Claude Code, Cursor, and NVIDIA-powered stacks. The company manages over 18 billion artifacts for 6,600+ customers including 83 Fortune 100 companies and reports 120% net dollar retention and 48% YoY growth in customers above $1M ARR.
JFrog's revenue is overwhelmingly subscription-based, sold primarily through a direct enterprise field-sales motion targeting regulated industries (finance, healthcare, government) with an Enterprise+ tier representing 58% of revenue and multi-year contracts, supplemented by inside sales for mid-market and free-trial/self-serve PLG. Cloud subscriptions — which crossed the 50% threshold of total revenue in Q1 2026 at $78.9M, up 50% year-over-year — are the principal growth engine, with on-premise/self-managed deployments still material. Pricing is quote-driven with annual billing; JFrog implemented a roughly 100% basic price increase on certain tiers in 2025, contributing to some customer attrition but supporting gross margins of approximately 77% and a non-GAAP operating margin of 21.4% in Q1 2026. Distribution combines direct enterprise sales, channel partners (notably exclusive iZeno coverage of Southeast Asia), and marketplace listings (Cursor verified plugin reaching 1M+ daily users), with technology partnerships spanning NVIDIA, Anthropic, GitHub, Docker, ServiceNow, and Maven.
The company is publicly traded, ended Q1 2026 with $741.2M in cash and investments, and authorized a $300M share repurchase program in February 2026. FY2025 revenue reached $531.8M (+24.1% YoY) with FY2026 guidance of $628-$632M; recent strategic positioning includes recognition as a Leader (highest Ability to Execute) in Gartner's inaugural Magic Quadrant for Software Supply Chain Security and the launch of an agentic governance layer designed to make JFrog the default system of record for AI-generated software artifacts.
JFrog firmographics
Firmographics- Name
- JFrog
- Legal name
- JFrog Ltd.
- Website
- https://jfrog.com
- Company type
- Public
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- JFrog (NASDAQ: FROG) provides a unified software supply chain platform that manages artifacts, AI models, and agent skills for 6,600+ enterprises including 83 Fortune 100 companies, combining DevOps, DevSecOps, and MLOps capabilities under a subscription-based, primarily enterprise field-sales go-to-market.
- Ownership category
- akta.pro rank
JFrog industry classification
Industry- Product category
- Software Supply Chain Security / DevSecOps Platform
- NAICS
- Software Publishers (5132), Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- DevSecOps & Supply Chain Security (DevOps toolchain security) (BPAEAKAI)
- akta.pro secondary industries
- End-to-End MLOps & ML Platform Suites (HDAAABAA), Platform Engineering & Internal Developer Platforms (IDP) (BPAEAKAC)
Keywords
Where JFrog is headquartered
LocationHeadquarters
- HQ city
- Sunnyvale
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
JFrog business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription-based Software Licenses (Enterprise+): JFrog's primary revenue stream is subscription-based licensing of its software supply chain platform (Artifactory, Xray, Curation, Advanced Security, AI Catalog). The Enterprise+ tier represents 58% of total revenue. Pricing is subscription-based with enterprise agreements typically multi-year, and pricing increases were implemented in 2025 (approximately 100% basic price increase for some tiers). The company reports net dollar retention of 120% and has grown its customer cohort of $1M+ ARR customers by 48% YoY to 80 customers.
- Cloud/SaaS Subscriptions: Cloud revenue grew 50% year-over-year to $78.9 million in Q1 2026, now representing 51% of total revenue (crossing the majority threshold). Cloud revenue growth accelerated from 42% in Q4 2025, and the company raised its fiscal 2026 cloud growth assumption to 33-35%. Management guided for continued cloud migration acceleration driven by AI experimentation and security adoption.
- Professional Services and Support: JFrog provides DevOps consulting services, implementation, regulatory compliance support, and training through its customer success organization and partner network. The company also offers tiered support plans (Standard, Gold, Platinum) with corresponding SLAs including 99.99% Premium Availability option.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free trial available for self-service onboarding |
| Subscription | Annual | Enterprise platform with full capabilities |
| Subscription | Annual | Support tiers: Standard, Gold, Platinum, and Premium Availability (99.99%) |
Go-to-market motion3 records
Distribution channels6 records
Marketing channels8 records
JFrog product offering
Product offeringCore offering
JFrog provides a unified software supply chain platform that delivers end-to-end artifact management, security scanning, and AI/ML governance for enterprise DevOps, DevSecOps, and MLOps teams. Its core product, JFrog Artifactory, serves as a universal binary and ML model repository, complemented by JFrog Xray (SCA), Advanced Security (SAST, IaC, secrets detection), Curation (malicious package blocking), AI Catalog, MCP Registry, and Agent Skills Registry. The platform is sold as subscription-based cloud/SaaS or self-managed enterprise software and serves 6,600+ organizations including 83 Fortune 100 companies.
Product overview
JFrog offers a unified software supply chain platform that integrates DevOps, DevSecOps, and MLOps capabilities. The platform architecture centers on JFrog Artifactory as the universal artifact repository and ML model registry manager, complemented by security tools including JFrog Xray (SCA scanning), JFrog Advanced Security (contextual analysis, SAST, secrets detection), and JFrog Curation (malicious package blocking). The AI governance layer consists of JFrog AI Catalog, JFrog ML (MLOps), JFrog MCP Registry, and JFrog Agent Skills Registry for governing AI models, agent skills, and MCP servers. Additional modules include JFrog Distribution (secure artifact distribution), JFrog Connect (IoT device management), JFrog Runtime (production security monitoring), JFrog AppTrust (application risk governance), and JFrog Fly (agentic software delivery). The platform manages over 18 billion artifacts for 6,600+ enterprise customers including 83 Fortune 100 companies.
Differentiator
Problem solved
Functional benefit
Brands
- JFrog Artifactory: Universal Artifact & ML Model Repository Manager - the company's core artifact repository platform
- JFrog Xray
- JFrog Advanced Security
- JFrog Curation
- JFrog AI Catalog
- JFrog Runtime
- JFrog AppTrust
- JFrog Distribution
- JFrog Connect
- JFrog ML
- JFrog Fly
- JFrog MCP Registry
- JFrog Agent Skills Registry
Products and services
- JFrog Artifactory Universal Artifact and ML Model Repository Manager serving as the central single source of truth for all binaries, packages, and ML models across every language and package type. Supports 60+ technology types and is the foundation product of the JFrog Platform.
- JFrog Xray (Security Essentials) Integrated Software Composition Analysis (SCA) solution for software and AI artifacts that performs CVE analysis, license compliance, secrets detection, and malicious package identification with contextual reachability analysis to reduce false positives.
- JFrog Advanced Security Supply Chain Exposure Scanning and Impact Analysis adding deep contextual analysis, SAST (Source Code Scanning), Infrastructure as Code (IaC) misconfiguration scanning, and secrets detection across the software development lifecycle.
- JFrog Curation Proactively curates and blocks malicious software packages, license violations, and high-risk dependencies before they enter the development environment, addressing supply chain threats at the point of ingestion rather than scanning after the fact.
- JFrog AI Catalog Centralized AI Control and Governance platform that detects, secures, and controls every AI asset including models, agent skills, and MCP servers used by coding agents and developers. Governs and controls the AI agent lifecycle.
- JFrog MCP Registry MCP Governance and Security at Enterprise Scale, providing a secure system of record for Model Context Protocol (MCP) servers used in AI-driven software supply chains. Enables enterprises to monitor AI connections, block unsafe developer tools, and enforce security policies on agentic workflows.
- JFrog Agent Skills Registry Enterprise-governed skills registry for trusted AI agents that enables organizations to scan, verify, and sign AI skills upon upload to detect vulnerabilities, malicious payloads, and compliance risks.
- JFrog ML
Quantifiable outcome
- Organizations using JFrog reduced vulnerability resolution time from days to hours
- +4 more outcomes
Companies that use JFrog
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles3 records
JFrog technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability7 records
Feature12 records
JFrog partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered flagship and core.
- AnthropicflagshipJFrog launched a JFrog Platform plugin for Anthropic's Claude Code in June 2026, developed in collaboration with Anthropic, bringing enterprise-grade software supply chain governance and security to AI coding agents. The plugin enables developers to scan, curate, and secure artifacts and dependencies within their development workflow, addressing concerns about blind AI decision-making in software supply chains. JFrog positions itself as a universal system of record across multi-agent environments.
- NanoClawcoreNanoClaw and JFrog launched a joint security integration in June 2026 that protects NanoClaw autonomous AI agents from downloading malicious code by routing all package requests exclusively through JFrog's vetted software registries. The integration acts as an automated immune system, blocking compromised packages and automatically guiding agents to install safe versions instead. The partnership offers free access for open-source developers while seamlessly integrating with enterprise JFrog environments.
- iZenocoreIn March 2026, JFrog announced an exclusive partnership with iZeno, a Singapore-headquartered enterprise technology solutions provider, upgrading iZeno from a transactional reseller to the only authorized solutions partner for JFrog in the entire Southeast Asia region. The partnership enables iZeno to deliver full DevSecOps consulting, implementation services, regulatory compliance, and cloud-native modernization support across Malaysia, Indonesia, Thailand, and the Philippines. The collaboration aims to unify software supply chain management and address the growing complexity of discrete tools across organizations.
- NVIDIAflagshipJFrog announced its JFrog Agent Skills Registry at NVIDIA GTC 2026, providing a governance and verifiable trust layer for AI agents to operate securely at enterprise scale. The platform was validated through early integration with NVIDIA, natively supporting NVIDIA Agent Toolkit including NVIDIA OpenShell runtime. JFrog Artifactory serves as a registry for AI models and agent skills as part of the NVIDIA AI-Q Blueprint. NVIDIA cuOpt was used as the first example of a packaged skill.
- CursorcoreJFrog's Software Supply Chain Platform became available as a verified plugin in the Cursor AI coding agent marketplace in March 2026, giving over 1 million Cursor active daily users access to enterprise-grade security features within their AI-native IDE workflows. The plugin includes a remote MCP server connection, conversational AI skills, automated security rules, and dedicated supply chain security auditing, integrating with JFrog Xray and JFrog Advanced Security to flag vulnerabilities, exposed secrets, and policy violations in real time.
- GitHubcoreJFrog maintains a technology partnership with GitHub, evidenced by JFrog's recognition as GitHub's 2025 Tech Partner of the Year. The JFrog Platform integrates with GitHub for artifact management, security scanning, and CI/CD pipeline security. GitHub is listed as a key integration partner on JFrog's website.
- DockercoreJFrog maintains a container registry integration with Docker, listed among JFrog's key integrations. JFrog provides Docker security scanning through its Docker Desktop Extension and JFrog Xray integration, enabling vulnerability scanning of container images at every layer.
Scale indicators17 records
Recent moves6 records
Expansion highlights6 records
JFrog competitors and assessment
Company assessmentMarket position
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
JFrog social profiles
Digital presenceJFrog compliance and trust
Trust signalCompliance4 records
JFrog financial estimates
Financial estimateRevenue estimate
Valuation estimate
JFrog leadership team
Management profileNumber of profiles
Profiles13 records
JFrog subsidiaries and ownership
Company hierarchySubsidiaries1 record
JFrog funding detail
Funding detailFunding overview
Funding rounds6 records
Investors12 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
JFrog M&A and investment
M&A and investmentM&A8 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about JFrog
What does JFrog do?
JFrog provides a unified software supply chain platform that delivers end-to-end artifact management, security scanning, and AI/ML governance for enterprise DevOps, DevSecOps, and MLOps teams. Its core product, JFrog Artifactory, serves as a universal binary and ML model repository, complemented by JFrog Xray (SCA), Advanced Security (SAST, IaC, secrets detection), Curation (malicious package blocking), AI Catalog, MCP Registry, and Agent Skills Registry. The platform is sold as subscription-based cloud/SaaS or self-managed enterprise software and serves 6,600+ organizations including 83 Fortune 100 companies.
Is JFrog a public or private company?
JFrog is a public company. It is classified as public and is currently operating.
When was JFrog founded?
JFrog was founded in 2008. It employs 1,001 to 5,000 people.
Where is JFrog based?
JFrog is headquartered in Sunnyvale, United States, in the North America region.
How does JFrog make money?
Three revenue lines are on record. Subscription-based Software Licenses (Enterprise+) is the primary driver. The others are cloud/SaaS Subscriptions and professional Services and Support.
Does JFrog have an API?
Yes. JFrog offers a REST API for automated security scanning and component management. Through its extensive REST API, users can manage all aspects of component security with automated control over Users, Permissions, Watches, Components, Integrations and more. Additionally, JFrog CLI provides a simple client interface for JFrog Artifactory and JFrog Xray with simplified CLI commands enabling readable automation scripts. Developer documentation is at www.jfrog.com/confluence/display/XRAY/Xray+REST+API.
What industry is JFrog in?
JFrog's product category is Software Supply Chain Security / DevSecOps Platform. Its primary akta.pro industry code is BPAEAKAI, DevSecOps & Supply Chain Security (DevOps toolchain security), with a secondary code of HDAAABAA, End-to-End MLOps & ML Platform Suites. Its NAICS code is 5132 and its SIC code is 7372.