JFrog

What JFrog does

JFrog Ltd. (NASDAQ: FROG), founded in 2008 in Israel and headquartered in Netanya with U.S. operations in Sunnyvale, California, operates a unified software supply chain platform that unifies DevOps, DevSecOps, and MLOps workflows around a single artifact and AI-asset repository. The platform is anchored by JFrog Artifactory, a universal repository manager supporting 60+ package types, and is complemented by JFrog Xray (software composition analysis), JFrog Advanced Security (contextual reachability analysis, SAST, secrets detection, IaC scanning), JFrog Curation (proactive malicious-package blocking), JFrog Runtime, JFrog AppTrust, JFrog Distribution, and JFrog Connect (IoT updates). In 2024 JFrog acquired Qwak AI for approximately $230 million to add MLOps, and in 2026 extended the platform with an AI governance layer — JFrog AI Catalog, JFrog MCP Registry, and JFrog Agent Skills Registry — designed to govern AI models, MCP servers, and agent skills for organizations using AI coding agents such as Claude Code, Cursor, and NVIDIA-powered stacks. The company manages over 18 billion artifacts for 6,600+ customers including 83 Fortune 100 companies and reports 120% net dollar retention and 48% YoY growth in customers above $1M ARR.

JFrog's revenue is overwhelmingly subscription-based, sold primarily through a direct enterprise field-sales motion targeting regulated industries (finance, healthcare, government) with an Enterprise+ tier representing 58% of revenue and multi-year contracts, supplemented by inside sales for mid-market and free-trial/self-serve PLG. Cloud subscriptions — which crossed the 50% threshold of total revenue in Q1 2026 at $78.9M, up 50% year-over-year — are the principal growth engine, with on-premise/self-managed deployments still material. Pricing is quote-driven with annual billing; JFrog implemented a roughly 100% basic price increase on certain tiers in 2025, contributing to some customer attrition but supporting gross margins of approximately 77% and a non-GAAP operating margin of 21.4% in Q1 2026. Distribution combines direct enterprise sales, channel partners (notably exclusive iZeno coverage of Southeast Asia), and marketplace listings (Cursor verified plugin reaching 1M+ daily users), with technology partnerships spanning NVIDIA, Anthropic, GitHub, Docker, ServiceNow, and Maven.

The company is publicly traded, ended Q1 2026 with $741.2M in cash and investments, and authorized a $300M share repurchase program in February 2026. FY2025 revenue reached $531.8M (+24.1% YoY) with FY2026 guidance of $628-$632M; recent strategic positioning includes recognition as a Leader (highest Ability to Execute) in Gartner's inaugural Magic Quadrant for Software Supply Chain Security and the launch of an agentic governance layer designed to make JFrog the default system of record for AI-generated software artifacts.

Name

JFrog

Legal name

JFrog Ltd.

Website

https://jfrog.com

Company type

Public

Founded year

2008

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

JFrog (NASDAQ: FROG) provides a unified software supply chain platform that manages artifacts, AI models, and agent skills for 6,600+ enterprises including 83 Fortune 100 companies, combining DevOps, DevSecOps, and MLOps capabilities under a subscription-based, primarily enterprise field-sales go-to-market.

Ownership category

akta.pro rank

Product category

Software Supply Chain Security / DevSecOps Platform

NAICS

Software Publishers (5132), Software Publishers (513210)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

DevSecOps & Supply Chain Security (DevOps toolchain security) (BPAEAKAI)

akta.pro secondary industries

End-to-End MLOps & ML Platform Suites (HDAAABAA), Platform Engineering & Internal Developer Platforms (IDP) (BPAEAKAC)

Keywords

• Binary repository management
• Software supply chain security
• Artifact management platform
• DevSecOps solutions
• MLOps model governance

Headquarters

HQ city

Sunnyvale

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription-based Software Licenses (Enterprise+): JFrog's primary revenue stream is subscription-based licensing of its software supply chain platform (Artifactory, Xray, Curation, Advanced Security, AI Catalog). The Enterprise+ tier represents 58% of total revenue. Pricing is subscription-based with enterprise agreements typically multi-year, and pricing increases were implemented in 2025 (approximately 100% basic price increase for some tiers). The company reports net dollar retention of 120% and has grown its customer cohort of $1M+ ARR customers by 48% YoY to 80 customers.
2. Cloud/SaaS Subscriptions: Cloud revenue grew 50% year-over-year to $78.9 million in Q1 2026, now representing 51% of total revenue (crossing the majority threshold). Cloud revenue growth accelerated from 42% in Q4 2025, and the company raised its fiscal 2026 cloud growth assumption to 33-35%. Management guided for continued cloud migration acceleration driven by AI experimentation and security adoption.
3. Professional Services and Support: JFrog provides DevOps consulting services, implementation, regulatory compliance support, and training through its customer success organization and partner network. The company also offers tiered support plans (Standard, Gold, Platinum) with corresponding SLAs including 99.99% Premium Availability option.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels8 records

Core offering

JFrog provides a unified software supply chain platform that delivers end-to-end artifact management, security scanning, and AI/ML governance for enterprise DevOps, DevSecOps, and MLOps teams. Its core product, JFrog Artifactory, serves as a universal binary and ML model repository, complemented by JFrog Xray (SCA), Advanced Security (SAST, IaC, secrets detection), Curation (malicious package blocking), AI Catalog, MCP Registry, and Agent Skills Registry. The platform is sold as subscription-based cloud/SaaS or self-managed enterprise software and serves 6,600+ organizations including 83 Fortune 100 companies.

Product overview

JFrog offers a unified software supply chain platform that integrates DevOps, DevSecOps, and MLOps capabilities. The platform architecture centers on JFrog Artifactory as the universal artifact repository and ML model registry manager, complemented by security tools including JFrog Xray (SCA scanning), JFrog Advanced Security (contextual analysis, SAST, secrets detection), and JFrog Curation (malicious package blocking). The AI governance layer consists of JFrog AI Catalog, JFrog ML (MLOps), JFrog MCP Registry, and JFrog Agent Skills Registry for governing AI models, agent skills, and MCP servers. Additional modules include JFrog Distribution (secure artifact distribution), JFrog Connect (IoT device management), JFrog Runtime (production security monitoring), JFrog AppTrust (application risk governance), and JFrog Fly (agentic software delivery). The platform manages over 18 billion artifacts for 6,600+ enterprise customers including 83 Fortune 100 companies.

Differentiator

Problem solved

Functional benefit

Brands

• JFrog Artifactory: Universal Artifact & ML Model Repository Manager - the company's core artifact repository platform
• JFrog Xray
• JFrog Advanced Security
• JFrog Curation
• JFrog AI Catalog
• JFrog Runtime
• JFrog AppTrust
• JFrog Distribution
• JFrog Connect
• JFrog ML
• JFrog Fly
• JFrog MCP Registry
• JFrog Agent Skills Registry

Products and services

• JFrog Artifactory Universal Artifact and ML Model Repository Manager serving as the central single source of truth for all binaries, packages, and ML models across every language and package type. Supports 60+ technology types and is the foundation product of the JFrog Platform.
• JFrog Xray (Security Essentials) Integrated Software Composition Analysis (SCA) solution for software and AI artifacts that performs CVE analysis, license compliance, secrets detection, and malicious package identification with contextual reachability analysis to reduce false positives.
• JFrog Advanced Security Supply Chain Exposure Scanning and Impact Analysis adding deep contextual analysis, SAST (Source Code Scanning), Infrastructure as Code (IaC) misconfiguration scanning, and secrets detection across the software development lifecycle.
• JFrog Curation Proactively curates and blocks malicious software packages, license violations, and high-risk dependencies before they enter the development environment, addressing supply chain threats at the point of ingestion rather than scanning after the fact.
• JFrog AI Catalog Centralized AI Control and Governance platform that detects, secures, and controls every AI asset including models, agent skills, and MCP servers used by coding agents and developers. Governs and controls the AI agent lifecycle.
• JFrog MCP Registry MCP Governance and Security at Enterprise Scale, providing a secure system of record for Model Context Protocol (MCP) servers used in AI-driven software supply chains. Enables enterprises to monitor AI connections, block unsafe developer tools, and enforce security policies on agentic workflows.
• JFrog Agent Skills Registry Enterprise-governed skills registry for trusted AI agents that enables organizations to scan, verify, and sign AI skills upon upload to detect vulnerabilities, malicious payloads, and compliance risks.
• JFrog ML

Quantifiable outcome

• Organizations using JFrog reduced vulnerability resolution time from days to hours
• +4 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability7 records

Feature12 records

Partnerships

Seven partnerships are on record, tiered flagship and core.

• AnthropicflagshipStrategic or Co-development Partner · 1 June 2026JFrog launched a JFrog Platform plugin for Anthropic's Claude Code in June 2026, developed in collaboration with Anthropic, bringing enterprise-grade software supply chain governance and security to AI coding agents. The plugin enables developers to scan, curate, and secure artifacts and dependencies within their development workflow, addressing concerns about blind AI decision-making in software supply chains. JFrog positions itself as a universal system of record across multi-agent environments.
• NanoClawcoreTechnology or Integration · 1 June 2026NanoClaw and JFrog launched a joint security integration in June 2026 that protects NanoClaw autonomous AI agents from downloading malicious code by routing all package requests exclusively through JFrog's vetted software registries. The integration acts as an automated immune system, blocking compromised packages and automatically guiding agents to install safe versions instead. The partnership offers free access for open-source developers while seamlessly integrating with enterprise JFrog environments.
• iZenocoreChannel Partner/ Reseller/ Distributor · 1 March 2026In March 2026, JFrog announced an exclusive partnership with iZeno, a Singapore-headquartered enterprise technology solutions provider, upgrading iZeno from a transactional reseller to the only authorized solutions partner for JFrog in the entire Southeast Asia region. The partnership enables iZeno to deliver full DevSecOps consulting, implementation services, regulatory compliance, and cloud-native modernization support across Malaysia, Indonesia, Thailand, and the Philippines. The collaboration aims to unify software supply chain management and address the growing complexity of discrete tools across organizations.
• NVIDIAflagshipTechnology or Integration · 1 March 2026JFrog announced its JFrog Agent Skills Registry at NVIDIA GTC 2026, providing a governance and verifiable trust layer for AI agents to operate securely at enterprise scale. The platform was validated through early integration with NVIDIA, natively supporting NVIDIA Agent Toolkit including NVIDIA OpenShell runtime. JFrog Artifactory serves as a registry for AI models and agent skills as part of the NVIDIA AI-Q Blueprint. NVIDIA cuOpt was used as the first example of a packaged skill.
• CursorcoreTechnology or Integration · 1 March 2026JFrog's Software Supply Chain Platform became available as a verified plugin in the Cursor AI coding agent marketplace in March 2026, giving over 1 million Cursor active daily users access to enterprise-grade security features within their AI-native IDE workflows. The plugin includes a remote MCP server connection, conversational AI skills, automated security rules, and dedicated supply chain security auditing, integrating with JFrog Xray and JFrog Advanced Security to flag vulnerabilities, exposed secrets, and policy violations in real time.
• GitHubcoreTechnology or IntegrationJFrog maintains a technology partnership with GitHub, evidenced by JFrog's recognition as GitHub's 2025 Tech Partner of the Year. The JFrog Platform integrates with GitHub for artifact management, security scanning, and CI/CD pipeline security. GitHub is listed as a key integration partner on JFrog's website.
• DockercoreTechnology or IntegrationJFrog maintains a container registry integration with Docker, listed among JFrog's key integrations. JFrog provides Docker security scanning through its Docker Desktop Extension and JFrog Xray integration, enabling vulnerability scanning of container images at every layer.

Scale indicators17 records

Recent moves6 records

Expansion highlights6 records

Market position

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/jfrog-ltd
• Xx.com/jfrog
• Facebookfacebook.com/artifrog

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Subsidiaries1 record

Funding overview

Funding rounds6 records

Investors12 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A8 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about JFrog