JFrog Ltd (FROG)

JFrog Positioned as a Leader in the First Gartner® Magic Quadrant™ for Software Supply Chain SecurityJune 22, 2026 11:35 AM
Business Wire JFrog places highest for ability to execute; reinforcing the market need for a holistic, unified software supply chain solution to secure all artifacts and AI assets JFrog Ltd. (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, the system of record for trusted software artifacts, binaries, and AI assets, today announced it has been named a Leader in the Gartner® Magic Quadrant™ for Software Supply Chain Security, positioned the highest for Ability to Execute amongst any other vendor in the report. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260622339694/en/JFrog places highest for ability to execute; reinforcing the market need for a holistic, unified software supply chain solution to secure all artifacts and AI assets This is the first time Gartner has published a Magic Quadrant for this segment – a complimentary copy of the full report is available here. "Software engineering is evolving into software supply chain engineering. Developers and security teams now carry a responsibility that extends well beyond the application: not only to build software, but to build software that can be trusted in a hybrid world of human and AI agents. It is a structural shift, not a trend,” said Shlomi Ben Haim, CEO of JFrog. “The AI era is accelerating software creation faster than any organization can audit. Enterprises ship more code, from more sources, and the demand for autonomous flow is growing more than ever. This movement leads to a Tsunami of binaries and a flood of vulnerabilities that make the software supply chain the primary target for attacks. While this is Gartner's first Magic Quadrant for this category, it’s a market JFrog has been building for years. We understood early that speed without trust is a liability. Having a holistic platform – that automates software flow with security, governance, and velocity operating as one – is what enterprises need, and it's what we built.” Closing the AI Governance Gap in Software Supply Chains Gartner identified software supply chain attacks among the top four critical security threats where attackers currently hold the advantage1. The threat is no longer focused on the volume of code, but rather, the speed of the "CVE Blitz" – adversarial symmetry – and this risk is only accelerating with AI. The JFrog 2026 Software Supply Chain Security State of the Union report found: Attackers are actively targeting AI models, agentic tools, and developer workflows – not just finished applications. A majority of organizations still source AI models from untrusted repositories, creating a governance gap that existing tools were not built to close. Malicious packages reached record levels, with 177,000 new malicious packages detected. Malicious npm packages surged 451% year-over-year. These findings highlight a fundamental shift: scanning finished code is necessary but no longer sufficient. Security has to be built into the supply chain itself – at every stage, for every artifact type, including AI. Delivering Trusted Software in the AI Era Must Be Structural JFrog is recognized in this inaugural report for its differentiated approach to software supply chain security. Unlike competitors, JFrog embeds trust, governance, and security directly into the software delivery process. Rather than adding another point solution to an already fragmented ecosystem, the JFrog Software Supply Chain Platform brings together software composition analysis, OSS license compliance and third-party governance, continuous threat intelligence, end-to-end SBOM lifecycle management, third-party reputation analysis, and binary artifact management to help enterprises secure the full lifecycle of software and AI assets. Available as SaaS, on-premises, or in hybrid environments, JFrog is designed for the operational realities of the enterprise that need security and compliance without compromising developer velocity or slowing innovation. Innovations in the Gartner evaluation of the JFrog Platform include: JFrog Curation: Malicious packages, vulnerable dependencies, and non-compliant components are increasingly entering software environments before anyone notices – and regulations like DORA are raising the stakes for organizations that can't demonstrate control over what enters their software supply chain. JFrog Curation is designed to stop risky open-source components at the door and guides developers to pre-vetted package versions, before a bad dependency becomes everyone's problem. JFrog AI Catalog and MCP Server: As AI-generated code and agent-based development accelerate, most enterprises have no visibility into which AI models and agent skills are entering their environments – and no controls to stop the ones they shouldn't trust. JFrog AI Catalog and MCP Server apply the same security standards and trust layer enterprises already use JFrog to enforce. JFrog AppTrust: Security and compliance teams are under growing pressure to prove that policies were actually enforced – not just written down – yet most still rely on manual approvals, and disconnected evidence trails that fall apart under audit scrutiny. JFrog AppTrust replaces that with immutable evidence and automated policy gates across the software supply chain, so teams can demonstrate continuous enforcement without spreadsheets or last-minute fire drills. Expanded SBOM Evidence: Customers, auditors, and regulators are no longer satisfied knowing what software an organization uses – they want proof that known vulnerabilities were assessed, that risk decisions were documented, and that nothing was ignored. Expanded SBOM evidence capabilities, including VEX support aligned to CycloneDX and SPDX 3.0, are built to give organizations the verifiable documentation trail they need to answer those questions with facts, not explanations. Together, these capabilities enable organizations to maintain security, compliance, and velocity in the AI era across increasingly complex and distributed software supply chains. To read the full Gartner Magic Quadrant for Software Supply Chain Security, visit https://jfrog.com/gartner-magic-quadrant/. To learn more about JFrog’s vision and approach to software supply chain security read this blog. Share on X: @JFrog has been named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security – and placed the highest on the Ability to Execute axis of any vendor evaluated. Learn why: https://bit.ly/4grCARU #SoftwareSupplyChain #DevSecOps #AI #governance #DevGovOps Gartner Magic Quadrant for Software Supply Chain Security, By Aaron Lord, Johnny Walters, Jason Gross, 17 June 2026 - ID G00843814. Gartner and Magic Quadrant are trademarks of Gartner, Inc., and/or its affiliates. Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose. This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from JFrog. About JFrog JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at https://jfrog.com or follow us on X @JFrog. 1 Gartner, Press Release: Gartner Identifies Four Critical Threats Requiring Urgent Improvements from Cybersecurity Leaders, NATIONAL HARBOR, MD, June 2, 2026. View source version on businesswire.com: https://www.businesswire.com/news/home/20260622339694/en/ Media Contact:
Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com Investor Contact:
Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com Original: JFrog Positioned as a Leader in the First Gartner® Magic Quadrant™ for Software Supply Chain Security

JFrog and Anthropic Bring Enterprise-Grade Software Supply Chain Governance and Security to Claude CodeJune 10, 2026 9:15 AM
Business Wire Anthropic Claude Code users can now run governed, supply-chain-aware AI coding agents, assisted by JFrog’s trusted, universal, multi-agent platform JFrog Ltd (Nasdaq: FROG), the creators of the JFrog Software Supply Chain Platform, the system of record for trusted software artifacts, binaries, and AI assets, unveiled its JFrog Platform plugin for Claude Code, in collaboration with Anthropic. Available immediately to all Claude Code users, the new plugin represents a significant milestone in bringing enterprise-grade software supply chain governance to one of the fastest-growing AI coding agent platforms in the world, reinforcing JFrog’s position as a critical trust layer and system of record for the rapidly expanding AI agent environment. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260610800676/en/Anthropic Claude Code users can now run governed, supply-chain-aware AI coding agents, assisted by JFrog’s trusted, universal, multi-agent platform The need for agent-specific security has been highlighted by Anthropic, stating, “As agents grow more capable, attack surfaces are constantly shifting. The types of failures we’ve seen are likely to be repeated across industries and labs. We need collective investment in agent-specific security posture, from shared benchmarks and disclosure norms to common identity standards and cross-vendor red-teaming.” “AI agents are active participants in the software supply chain, making decisions about dependencies, builds, and deployments – but most of them are doing it blind, without any supply chain context. This is often how malicious packages, vulnerabilities, and ungoverned AI assets enter production today, exposing organizations to software supply chain attacks,” said Yoav Landman, Co-Founder and CTO of JFrog. “AI-enabled innovation cannot come at the expense of security or compliance. Enterprises need a universal system of record with real-time control and visibility into the decisions these agents make, that's what this integration enables.” Governing the Binaries Surge with Agentic DevSecOps AI coding agents are driving a surge of binaries, with the JFrog Platform currently managing over 18 billion artifacts, a 136% increase from the previous year1. The new JFrog Platform plugin for Claude Code is designed to help organizations tame unorthodox AI agent behavior by providing developers with governed access to scan, curate, and secure every artifact and dependency their agents consume. It also extends Claude Code with deep, domain-specific JFrog Platform Skills, designed to give developers and their agents the ability to execute platform operations using natural language. Combined with the recently announced JFrog MCP Registry and JFrog Agent Skills Registry, the new plugin is expected to deliver: Real-time, Upstream Governance: Governance, package security and license compliance, and provenance validation happen inside the development workflow, not after it. Agents enforce policies as code is written, eliminating the manual handoffs that slow releases and introduce risk. MCP and Agent Skills Governance: Ensures agents, developers, and AI users only pull verified, secure, and governed MCP servers and agent skills – blocking rogue access to sensitive internal data and preventing unauthorized actions. Accelerated DevOps Workflows: Engineering time is no longer wasted on coding repetitive platform tasks. Repository management, project provisioning, and routine operations are handled by agents through JFrog Platform Skills – so developers stay focused on building, not configuring. Strengthened Auditability: When an incident or audit happens, teams need answers in minutes, not days. The JFrog Platform plugin provides end-to-end traceability from source commits to build artifacts, so security teams can respond faster and prove compliance without scrambling. Why Agent Universality Matters Now The new plugin reflects how JFrog sees the market for trusted agents evolving: teams will use different AI agents and JFrog’s role is to support those choices while maintaining governance and control. Rather than building one agent at a time, the JFrog Platform provides three layers of agent connectivity that work across any AI coding environment, including: JFrog Platform Skills, giving agents deep, domain-specific knowledge around the JFrog Platform, enabling complex operations like vulnerability scanning, curation checks, and provenance verification through simple natural language. JFrog MCP Tools, join JFrog Skills in providing standardized access to security, compliance, and artifact data across the JFrog Platform, ensuring consistent governance regardless of which agent initiates the request. Additional Agent-Native Plugins Support, starting with Claude Code, alongside Cursor and VS Code Copilot. Collectively, these plugins aim to bring the full JFrog Platform into each agent’s native environment with streamlined deployment and simple authentication. Together, these layers establish the JFrog Platform as the foundational system of record across multi-agent environments – ensuring that governance, provenance, and security travel with the developer, not with any single tool. The JFrog Platform plugin for Claude Code is available immediately at https://claude.com/plugins/jfrog. For more information on the new JFrog Platform plugin for Claude Code and more details on JFrog’s agentic interfaces, read this blog or check out this video. Like this Story? Share this on X: Accelerate your #AI development without sacrificing #governance or security with the new JFrog Platform plugin for @Anthropic’s #ClaudeCode. Give your AI agents the full software supply chain context needed to automatically enforce governance, security, and compliance right from your IDE workflow. Learn how to harness the power of agentic #DevSecOps with new JFrog Platform Skills and MCP tools. Learn more: https://bit.ly/41O6RBZ #security #DevGovOps About JFrog JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog. Cautionary Note About Forward-Looking Statements This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including, but not limited to, statements regarding our expectations with respect to the anticipated performance of the JFrog Platform plugin for Claude Code. These forward-looking statements are based on our current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement. There are a significant number of factors that could cause actual results, performance or achievements to differ materially from statements made in this press release, including but not limited to risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements, except as required by law. 1JFrog 2026 Software Supply Chain Security State of the Union: https://jfrog.com/software-supply-chain-state-of-union/ View source version on businesswire.com: https://www.businesswire.com/news/home/20260610800676/en/ Media Contact:
Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com Investor Contact:
Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com Original: JFrog and Anthropic Bring Enterprise-Grade Software Supply Chain Governance and Security to Claude Code

New JFrog Report Warns: AI Governance Fails as Software Supply Chain Attacks Hit Record HighsMay 20, 2026 4:05 PM
Business Wire The Hidden Costs of AI at Scale: JFrog’s 2026 Software Supply Chain Security report shows threat actors weaponizing developer workflows, driving 177K new malicious packages, 495 malicious AI models, and a 451% increase in infected npm packages JFrog Ltd. (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, the system of record for trusted software artifacts, binaries, and AI assets today announced the findings of its 2026 Software Supply Chain Security State of the Union report. This year’s report reveals an unprecedented acceleration in enterprise software risk as threat actors expand strikes beyond traditional package registries into AI model registries and developer tooling, creating a blind spot in current software governance frameworks. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260520126325/en/The AI governance gap is real - and it's coming at a high cost to enterprise organizations. The JFrog 2026 Software Supply Chain Security report shows a 451% surge in malicious npm packages, AI agent skills are a new attack surface; and 97% of orgs claim AI governance while 53% still pull models from public registries where malicious payloads have been found. Read the report to learn earn how to move from reactive patching to a governance-first framework that actually keeps pace with Al speed. "Every enterprise is adding AI to their software supply chain, which is increasing the attack surface for bad actors. Our report shows attackers are no longer just breaching traditional defenses – they are actively weaponizing the trusted models, registries, and agentic tools driving today's AI-powered development. The era of 'scan and hope' is over,” said Shlomi Ben Haim, CEO & Co-Founder, JFrog. “Organizations need a single source of truth that governs every binary, every model, and every AI agent skill from the moment it enters the pipeline to the moment it is deployed in production. This is what JFrog was built to deliver.” As AI moves from experimentation to a structural force reshaping the software supply chain, organizations are seeing a widening gap between reported security confidence and the risks accumulating in their infrastructure. Drawing on data from 18.2 billion artifacts managed across the JFrog Platform (up 136% year-over-year), original vulnerability research by the JFrog Security Research team, and a global survey of 1,508 security and DevOps professionals 1, this report exposes what it calls the “illusion of mastery”, i.e. the growing disparity between perceived security and the reality of mounting supply chain risk. Key Findings Include: Malicious Packages Hit an All-Time High: Malicious npm packages surged 451% year-over-year, with 177K new malicious packages detected across registries in the last year. Attackers are exploiting trust at scale – the “Qix” campaign used just 25 packages to compromise over 2.5 million downloads. AI Agent Skills Emerge as a New Attack Surface: For the first time, JFrog tracked malicious AI agent skills – identifying 969 carrying high-impact payloads alongside 495 malicious AI models on Hugging Face and 56 malicious extensions on OpenVSX. Attackers are no longer just targeting code; they are targeting the autonomous tools that write, review, and deploy it. Cutting through the Noise: Vulnerabilities Are Surging and Severity Scores Are Misleading: Over 48,000 new CVEs were disclosed in 2025, a 20% year-over-year increase partially driven by AI-generated code reintroducing decades-old weaknesses, like Injection (CWE-74), which grew 3,110%. Yet the JFrog Security Research team found that 66% of CVEs analyzed had minimal real-world applicability: volume-based triage is noise, while context and applicability become the mission-critical signals. The Fastest-Growing Threats Are the Least Defended: Only 40% of organizations have adopted malicious package detection and secrets detection is active at just 28%. The categories growing fastest in threat volume remain the least covered by existing tooling. Security Teams Bear the Human Cost of AI: 45% of respondents say reviewing and hardening AI-generated code is now a major time drain – proving that AI hasn't eliminated work – it’s merely shifted the burden as threat actors weaponize upstream developer environments and agentic tools. The AI Governance Gap: 97% of organizations claim they have certified model governance – yet 53% self-host models from sources where malicious payloads have been detected, and 18% have zero governance over their integrated development environments (IDE) or Model Context Protocol (MCP) servers sitting inside their developers’ workflows. Thus, the gap between reported executive confidence and actual control is widening as AI development accelerates. “The industry is operating with a false sense of security. Vulnerabilities are growing in number, but the real threat lies in threat actors hijacking our CI/CD pipelines and developer tools before code even exists,” said Shachar Menashe, VP of JFrog Security Research. “Moving to automated, platform-native governance is no longer optional – it is the only way to secure the intelligent systems creating, approving, and distributing today’s software.” “AI has not only changed how software is written; it has also increased the speed and scale at which zero-day vulnerabilities are exploited, and malicious software supply chain attacks are developed and distributed,” said Yoav Landman, CTO and Co-Founder of JFrog. “To stay ahead, organizations need automated governance that curates every software asset entering the organization, whether introduced by agents or developers, and continuously monitors every release that contains those assets. The race is no longer about who discovers a zero-day first, because that information is advertised within minutes. It is about who can fortify their software supply chain at scale to keep their organization secure.” To explore the full findings of this year’s report and learn how your organization can close the AI governance gap, download the JFrog 2026 Software Supply Chain Security State of the Union. You can also check out our blog or register to join JFrog Security and developer experts for an upcoming webinar – “The Illusion of Mastery: Bridging the Al Governance Gap in 2026” – detailing the challenges, threats, and necessary actions for securing your software supply chain in the AI era. Like this Story? Share this on X (a.k.a. Twitter): Malicious #npm packages surged 451%; AI agent skills are now an attack surface; and 97% of orgs claim AI governance while 53% still pull models from public registries where malicious payloads have been found. The AI governance gap is real. Read the @JFrog 2026 Software Supply Chain Security report: https://bit.ly/3PRNzJB.
#DevSecOps #SoftwareSupplyChain #Cybersecurity #AI #governance #DevGovOps About JFrog JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps, and MLOps platform, is on a mission to create a world of trusted software delivery without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, govern, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at https://jfrog.com or follow us on X @JFrog. _______________________________________________________________________________________ 1 JFrog commissioned 4Media Group’s Atomik Research to conduct an international online survey of 1,508 IT professionals across selected industries in the United States (n=508), United Kingdom (n=125), India (n=167), Germany (n=120), France (n=125), Australia (n=165), Singapore (n=174), and Spain (n=124) between Jan-Feb. 2026. Respondents were full-time employees in IT, information systems, or technology departments holding specified job functions. All worked for organizations with 1,000+ employees and confirmed a software development team of at least 50 members. The margin of error for the overall sample is ±3 percentage points at a 95% confidence level.   View source version on businesswire.com: https://www.businesswire.com/news/home/20260520126325/en/ Media Contact:
Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com Investor Contact:
Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com Original: New JFrog Report Warns: AI Governance Fails as Software Supply Chain Attacks Hit Record Highs

JFrog Brings Enterprise-Grade Software Supply Chain Security to Over 1M AI Developers with New Cursor AI Coding AgentApril 15, 2026 4:00 AM
Business Wire
JFrog Platform plugin for Cursor gives developers the freedom to create and deliver next generation AI-powered software with built-in governance


JFrog Ltd (Nasdaq: FROG), the creators of the JFrog Software Supply Chain Platform, the system of record for trusted software artifacts, binaries, and AI assets, announced its Platform is now available in the Cursor marketplace. Over 1 million Cursor active daily users now have access to robust software supply chain security within their workflows via the new plugin, reinforcing JFrog’s position as a critical trust layer and system of record for the rapidly expanding AI agent ecosystem.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260415777867/en/The new JFrog Platform plugin for Cursor gives developers the freedom to create and deliver next generation AI-powered software with built-in governance.
“Today’s enterprises wanting to fully leverage AI-driven software creation are rightfully concerned about the security risks open source and autonomous tools used by AI will create,” said Yoav Landman, Co-Founder and CTO of JFrog. “Issues like Shadow AI, ungoverned MCP server access, malicious skills, and uncontrolled dependencies can create massive blind spots and lead to significant security vulnerabilities. By bringing the full power of the JFrog Platform directly into the Cursor coding agent, we are giving enterprises the guardrails they demand from the very beginning.”


Research from IDC Link states: “As enterprises transition from simple chatbots to autonomous AI agents, the need for security and governance has moved from the model itself to the actions those models take…However, challenges remain since the market for AI governance is rapidly evolving, with new entrants and approaches emerging. Standards for agentic components, such as skills and MCP servers, are still in flux. In addition, enterprises are still in the early stages of adopting autonomous agents, and the pace of adoption may vary significantly across industries.”1


Empowering a Diverse Ecosystem of AI Builders with Seamless Security and Governance


Cursor is one of the industry’s leading AI coding agents designed for developers, data scientists, and engineers, that emphasizes agentic capabilities via plugins and MCP servers (not just UI extensions like the VS Code marketplace). Modern developer workflows start inside AI-native Integrated Developer Environments (IDEs) like Cursor, where agents suggest code, pull dependencies, and make supply chain decisions in real time. However, agents often do this without any visibility into whether packages are safe, compliant, or policy approved.


Building upon its recently announced JFrog Agent Skills Registry – a unified repository to centrally manage, govern, and version control AI skills across all environments by treating them as software packages – the new JFrog Cursor plugin brings the full power of the JFrog Platform directly into the developer’s AI-native IDE without context switching or manual lookups, eliminating friction. Enterprises can now leverage JFrog as a system of record and control point designed for agentic development to allow for increased accuracy, consistency, and security across AI pipelines and the software supply chain.


The new plugin ships with four integrated components:



A remote MCP server connection: Authenticated seamlessly with the JFrog Platform via OAuth without the need for API keys.



Conversational AI Skills: Enables developers to manage artifacts, scan for vulnerabilities, and enforce policies using natural language interactions.



Automated Security Rules: Automatically enforces supply-chain best practices whenever a dependency file is touched.



Dedicated Supply Chain Security: Proactively audits dependencies for CVEs, license risks, and curation policy violations.



Additionally, the JFrog Platform plugin for Cursor offers seamless integration with JFrog Xray and JFrog Advanced Security, allowing vulnerabilities, exposed secrets, and infrastructure misconfigurations to be flagged as developers code. It also provides real-time security insights with clear context, along with easy-to-follow remediation advice and one-click dependency upgrades. The JFrog plugin for Cursor also provides AI agents with the necessary information and guidance to check dependencies in real-time, ensuring every software component is fully compliant with organizational standards and safe for use before it is ever committed.


The JFrog Platform plugin has been officially verified by Cursor and is available immediately in the Cursor marketplace and in GitHub. Users can browse and install the plugin directly through the marketplace panel within the editor or by visiting cursor.com/marketplace (marketplace access details provided in user prompt). Furthermore, customers using the recently announced JFrog MCP Registry can access a repository of pre-approved local and remote MCP servers directly from their preferred coding agents, inclusive of Claude Code, Cursor, and VS Code Copilot.


For more information on the new JFrog Platform plugin for Cursor read this blog or visit the support page here https://docs.jfrog.com/security/docs/cursor-1.


Like this Story? Share this on X: The future of software is autonomous, but it shouldn't be unmanaged! Our award-winning JFrog Platform is now available as a plugin in the @Cursor Marketplace. Bring enterprise-grade #softwaresupplychainsecurity into your AI-native IDE to catch #vulnerabilities, license risks, and policy violations before your code is ever committed. Build a foundation of trust so your #AI agents can scale as fast as your ambition. Learn more: https://bit.ly/47xnF3s #DevSecOps #security #DevGovOps


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.


Cautionary Note About Forward-Looking Statements


This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including, but not limited to, statements regarding our expectations with respect to the anticipated performance of the JFrog Platform plugin for Cursor.


These forward-looking statements are based on our current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement. There are a significant number of factors that could cause actual results, performance or achievements to differ materially from statements made in this press release, including but not limited to risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements except as required by law.


1 Source: IDC Link: "JFrog Establishes a Trust Layer for Agentic AI: Extending the Software Supply Chain to Skills, Models, and MCPs," by Jim Mercer, March 23, 2026.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260415777867/en/
Media Contact:

Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com


Investor Contact:

Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com


Original: JFrog Brings Enterprise-Grade Software Supply Chain Security to Over 1M AI Developers with New Cursor AI Coding Agent

JFrog Announces Timing of First Quarter 2026 Financial ResultsApril 8, 2026 4:05 PM
Business Wire
JFrog Ltd. (“JFrog”) (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, today announced it will report financial results for the first quarter 2026 on Thursday, May 7, 2026, following the market close. JFrog will host a conference call to discuss the results at 2:00 p.m. PT on the same day.


Event: JFrog’s First Quarter 2026 Financial Results Conference Call


Date: Thursday, May 7, 2026


Time: 2:00 p.m. PT (5:00 p.m. ET)


Webcast registration link: https://investors.jfrog.com/events-and-presentations


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260408613339/en/
Investor Contact:

Jeff Schreiner

jeffs@jfrog.com


PR Contact:

Siobhan Lyons

siobhanl@jfrog.com


Original: JFrog Announces Timing of First Quarter 2026 Financial Results

JFrog presenta il MCP Registry universale, che offre un sistema di registrazione sicuro per la supply chain del software guidata dall'IAApril 8, 2026 3:30 AM
Business Wire
Il nuovo JFrog MCP Registry offre un'unica fonte di verità per archiviare e gestire i server MCP da tutti i fornitori, monitorando al contempo le connessioni di IA aziendali e bloccando all'istante gli strumenti di sviluppo non sicuri


JFrog Ltd (Nasdaq: FROG), l'azienda di Liquid Software e creatrice della JFrog Software Supply Chain Platform (Piattaforma di supply chain del software), il sistema di registrazione per artefatti software, binari e asset dell'IA, oggi ha presentato il suo JFrog MCP Registry. Ampliando le attuali funzionalità del JFrog AI Catalog, il nuovo registry funge da unica fonte di verità per la gestione sicura dei server Model Context Protocol (MCP), aiutando le aziende a trasformare l'uso dell'intelligenza artificiale da un rischio di conformità e sicurezza a livello aziendale in un vantaggio competitivo.

Questo comunicato stampa include contenuti multimediali. Visualizzare l’intero comunicato qui: https://www.businesswire.com/news/home/20260318036649/it/Espandendo le capacità attuali di JFrog AI Catalog, il nuovo JFrog MCP Registry funge da fonte unica di verità per governare in modo sicuro i server del Model Context Protocol (MCP), aiutando le aziende a trasformare l'uso dell'IA da un rischio di conformità e sicurezza a livello aziendale in un vantaggio competitivo.
“Oggi gli sviluppatori in tutto il settore stanno rapidamente adottando server MCP da diversi strumenti e fornitori di IA, creando una sfida crescente per le organizzazioni che mancano di visibilità e controllo per monitorare queste connessioni”, ha dichiarato Yuval Fernbach, CTO, JFrog MLOps. “Stiamo assistendo a un radicale cambiamento nel modo in cui il software viene realizzato e installato, con gli agenti IA che diventano partecipanti attivi nella supply chain del software. Questa innovazione non può avvenire alle spese della sicurezza, della visibilità. del controllo o della conformità. Stabilendo un sistema di registrazione per l'uso del server MCP e trattandolo come qualsiasi altro asset binario, le organizzazioni possono innovare con fiducia su larga scala, mantenendo nel contempo la fiducia e il controllo richiesti nella supply chain del software guidato dall'IA”.


I rischi nascosti di server MCP non gestiti


Mentre l'IA passa da semplici interazioni su chat ad agenti autonomi, a lunga autonomia, gli sviluppatori si affidano ai server MCP per agire come "abilitatori dell'integrazione", dando ai modelli di IA l'accesso diretto a sistemi aziendali interni ed esterni, API e dati. Tuttavia questi server, che agiscono da intermediari fidati, possono anche eseguire codici potenzialmente nocivi direttamente sulla macchina di un utente o su sistemi remoti con privilegi elevati. Se non vengono gestiti, questi server espongono le organizzazioni a gravi rischi, tra cui vulnerabilità di dirottamento dei prompt, accessi con privilegi eccessivi ed esposizione delle credenziali.


Questa necessità di governance dell'AI ha il supporto dello studio Gartner1, che conferma che i responsabili della sicurezza e dell’IA devono stabilire gli MCP come metodo fondamentale per consentire agli agenti di comunicare con risorse esterne, implementando un registro centralizzato dei server MCP, applicando controlli di sicurezza a più livelli e definendo chiare politiche di responsabilità e governance.


Fornire un sistema di registrazione per i server MCP: il JFrog MCP Registry


Il nuovo JFrog MCP Registry offre un sistema di registrazione e un livello di fiducia dell'infrastruttura IA per tutti i server MCP, le competenze degli agenti, i modelli e gli asset binari agentici. Trattando i server MCP con gli stessi standard rigorosi di sicurezza dei pacchetti di software, il JFrog MCP Registry aiuta a eliminare i punti ciechi lungo l’intera catena di fornitura del software IA. Alla sua base, il JFrog MCP Registry è progettato per fornire:



Sicurezza nativa per progettazione per bloccare in modo proattivo il download e l'esecuzione di server MCP nocivi o non conformi, altrimenti ingenuamente prelevati dagli esseri umani o dagli agenti IA, piuttosto che attendere che si verifichi un problema e intervenire successivamente per risolverlo.



Governance e gestione centralizzate consentendo agli sviluppatori di accedere istantaneamente a un registro di server MCP pre-approvati locali e remoti direttamente dai propri Ambienti di sviluppo (per es., Claude Code, Cursor, VS-Code).



Applicazioni della politica di livello aziendale su ogni flusso di lavoro agentico, sostituendo la "fiducia cieca" con il controllo capillare, trattando ogni server MCP come un artefatto governato con scoperta centralizzata, configurazione e gestione dei permessi a livello di progetto, insieme a tutti gli altri modelli IA e artefatti software in un Catalogo IA unificato.



Universalità della piattaforma, che consente alle aziende di gestire ininterrottamente gli ecosistemi di agenti dai marketplace e tra vari fornitori, consentendo ai team di cambiare facilmente gli agenti di codifica senza dover mai ricostruire il loro sistema di registrazione sicuro.



Il JFrog MCP Registry è disponibile immediatamente come parte del JFrog AI Catalog. Per saperne di più su come funziona, leggere questo blog, visitare https://jfrog.com/ai-catalog/mcp-registry, o registrarsi per il webinar “The Right Tools for the Job: Securing Your AI Agents” del 31 marzo alle 10:00 orario di San Francisco.


Ti piace questo articolo? Condividilo su X: L’adozione sicura e conforme della tecnologia #IA è fondamentale per innovare senza sacrificare visibilità e controllo. Il JFrog MCP Registry offre alle aziende la possibilità di gestire i rischi legati all’IA agentica e ai flussi di lavoro automatizzati, senza frenare l’innovazione. Scopri di più: https://bit.ly/4sRXTPJ #MCP #AI #softwaresupplychainn #security #DevGovOps


Avvertenza sulle dichiarazioni previsionali


Questo comunicato stampa contiene dichiarazioni “previsionali”, come definito dalle leggi federali statunitensi sui titoli, comprese, ma non limitate a, dichiarazioni riguardanti le nostre aspettative in merito alle prestazioni previste del JFrog MCP Registry.


Queste dichiarazioni previsionali si basano sulle nostre attuali ipotesi, aspettative e convinzioni e sono soggette a rischi, incertezze, ipotesi e cambiamenti delle circostanze significativi, che potrebbero far sì che i risultati, le prestazioni o i successi effettivi di JFrog differiscano in modo sostanziale da quanto espresso o implicito in qualsiasi dichiarazione previsionale. Esiste un notevole numero di fattori che potrebbero causare differenze materiali tra i risultati, le prestazioni o i successi effettivi e le dichiarazioni contenute in questo comunicato stampa, inclusi, ma non limitati a, i rischi dettagliati nei nostri depositi presso la Securities and Exchange Commission, compresi il nostro rapporto annuale sul Modulo 10-K per l’anno conclusosi il 31 dicembre 2025, i nostri rapporti trimestrali sul Modulo 10-Q e altri depositi e rapporti che potremmo presentare di volta in volta alla Securities and Exchange Commission. Le dichiarazioni previsionali rappresentano le nostre convinzioni e ipotesi solo alla data di questo comunicato stampa. Decliniamo qualsiasi obbligo di aggiornare le dichiarazioni previsionali, salvo quanto richiesto dalla legge.


Informazioni su JFrog


JFrog Ltd. (Nasdaq: FROG), I creatori della piattaforma unificata DevOps, DevSecOps, DevGovOps e MLOps, sono impegnati nella missione di creare un mondo in cui il software venga distribuito senza attriti dallo sviluppo alla produzione. Guidata dalla visione del “Liquid Software”, la JFrog Platform è un sistema di registrazione della catena di fornitura del software progettato per supportare le organizzazioni nella creazione, gestione e distribuzione di software sicuro con velocità e scala. Funzionalità di sicurezza olistica aiutano a identificare, proteggere e risolvere minacce e vulnerabilità. La piattaforma universale, ibrida e multi-cloud di JFrog è disponibile sia come servizio SaaS attraverso i principali fornitori di servizi cloud sia in modalità self-hosted. Milioni di utenti e circa 6.600 organizzazioni in tutto il mondo, inclusa la maggior parte delle aziende Fortune 100, si affidano alle soluzioni JFrog per abbracciare in sicurezza la trasformazione digitale nell’era dell’IA. Per saperne di più, visitare www.jfrog.com o seguire l'azienda su X @JFrog.


1 Fonte: Gartner: Adopt MCP as a Strategic Approach for integrating AI Solutions, 7 novembre 2025.


Il testo originale del presente annuncio, redatto nella lingua di partenza, è la versione ufficiale che fa fede. Le traduzioni sono offerte unicamente per comodità del lettore e devono rinviare al testo in lingua originale, che è l'unico giuridicamente valido.

Vedi la versione originale su businesswire.com: https://www.businesswire.com/news/home/20260318036649/it/
Contatto per i media:

Siobhan Lyons, Direttore, Comunicazioni globali, siobhanL@jfrog.com


Contatto per gli investitori:

Jeff Schreiner, VP, Relazioni con gli investitori, jeffS@jfrog.com


Original: JFrog presenta il MCP Registry universale, che offre un sistema di registrazione sicuro per la supply chain del software guidata dall'IA

JFrog Delivers Trust Layer for AI-Driven Software with NVIDIAApril 8, 2026 3:00 AM
Business Wire
Enterprise AI agents can now operate at scale with built-in governance through the JFrog Agent Skills Registry, a secure system of record for MCPs, models, agent skills, and agentic binary assets


NVIDIA GTC – JFrog Ltd. (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, the system of record for software artifacts, binaries, and AI assets, today announced its new JFrog Agent Skills Registry. Validated through early integration with NVIDIA, the platform provides governance and a verifiable trust layer required for agentic workforces to operate securely at enterprise speed and scale.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260408282466/en/The new JFrog Agent Skills Registry will support NVIDIA Agent Toolkit, including NVIDIA NemoClaw, to provide the governance and verifiable trust layer required for agentic workforces to operate securely at enterprise speed and scale.
The new JFrog Agent Skills Registry will support NVIDIA Agent Toolkit, including NVIDIA NemoClaw, an open-source runtime for building and deploying safe, autonomous, long-running AI agents. JFrog Agent Skills Registry is built to provide the governance and verifiable trust layer required for agentic workforces to operate securely at enterprise speed and scale. Additionally, JFrog Artifactory will serve as a registry for AI models and agent skills with NVIDIA AI-Q Blueprint, as part of NVIDIA Agent Toolkit.


“AI agents are fundamentally reshaping how software is created and operated, but without a dedicated trust layer to enforce governance and secure workflows, they introduce significant enterprise risk,” said Gal Marder, JFrog’s Chief Strategy Officer. “Just as a malicious software package can compromise an application, an unvetted skill can guide an agent to perform harmful actions. To safely deploy autonomous agents at scale, organizations must move beyond blind trust. Working closely with the NVIDIA Enterprise AI Factory team, we are establishing a reliable system of record to store, scan, and govern all agentic binary assets across the software supply chain.”


The rapid evolution of AI has made autonomous agents, which rely on skills, a standard part of the software supply chain. However, an infrastructure layer beneath them is needed to enforce policies, security, and privacy controls required to make them safe for use. Without a standardized infrastructure, organizations face unprecedented security and compliance risks, as demonstrated by recent OpenClaw manipulations and breaches.


JFrog’s universal solution supports all agents, including NVIDIA NemoClaw, which delivers a trust layer to:



Enhance security and governance of all MCPs, agent skills, models, and software packages using a single source of truth to scan and block those with malicious intent or vulnerabilities.



Enable secure adoption and scale of autonomous, long-running agents without increasing risk or compromising compliance.



Power agentic workflows and developer innovation across the enterprise, safely and continuously, without disruption.



“Security and governance are key to deploying AI agents in the enterprise," said Pat Lee, vice president, Enterprise Partnerships, NVIDIA. “JFrog’s Agent Skills Registry for NVIDIA NemoClaw supports security and control for deploying long-running agents to help scale enterprise productivity with powerful new AI tools.”


By establishing the JFrog Platform as an integrated, secure registry for NVIDIA AI-Q Blueprint and NVIDIA NemoClaw runtime, enterprises will be able to safely operate agents using verified skills, MCP servers, models, and software packages. The NVIDIA and JFrog teams worked closely to validate a workflow for the ingestion and management of Artifactory as a skills registry, including support for NVIDIA-developed skills, using NVIDIA cuOpt as the first example of a packaged skill. This integration gives NVIDIA a single, governed endpoint for distributing verified AI skills across all agent platforms, with a promotion model that enforces increasing security gates from team to enterprise-wide use.


JFrog’s new offering includes:



Certified NVIDIA AI-Q Blueprint: The JFrog Platform is validated for the NVIDIA AI-Q Blueprint for lifecycle management and governance of agent skills.



Native NVIDIA NemoClaw Integration: JFrog Artifactory natively integrates with NVIDIA NemoClaw runtime, designed to provide secure, private, and scanned resources.



Centralized Agent System of Record: The JFrog AI Catalog and Agent Skills Registry act as the central control plane for NVIDIA NemoClaw, providing a single source of truth to track, audit, and manage the provenance of agents, NVIDIA NIM, and MCP servers.



Secure Agents and Behaviors: JFrog AI Catalog automatically scans, verifies, and signs all AI skills upon upload to detect vulnerabilities, malicious payloads, and compliance risks before NVIDIA NemoClaw – or other agents – ever adopt them.



Policy-Driven Governance and Control: The JFrog Platform allows organizations to set strict approval workflows, ensuring developers and AI agents can only access permitted, verified skills for specific projects and business units. The NVIDIA NemoClaw runtime then sandboxes each agent in an isolated, virtual environment, enabling safe execution of code without risk of broader network infection.



To learn more about how JFrog and NVIDIA are securing the future of the agentic AI software supply chain, read this blog on the JFrog Agent Skills Registry or visit the solutions page.


Like this Story? Share this on X: @JFrog partners with @NVIDIA to provide a trust layer to govern, scan, and secure #AI agent skills and tools across the #softwaresupplychain. Learn more: https://bit.ly/4t6TF75 #DevGovOps #DevSecOps #security #GTC


Cautionary Note About Forward-Looking Statements


This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including, but not limited to, statements regarding our expectations with respect to the anticipated performance of the JFrog Agent Skills Registry.


These forward-looking statements are based on our current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement. There are a significant number of factors that could cause actual results, performance or achievements to differ materially from statements made in this press release, including but not limited to risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements except as required by law.


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps, and MLOps platform, is on a mission to create a world of trusted software delivery without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, govern, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260408282466/en/
Media Contact:

Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com


Investor Contact:

Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com


Original: JFrog Delivers Trust Layer for AI-Driven Software with NVIDIA

JFrog offre un livello di fiducia per il software basato sull'AI con NVIDIAApril 8, 2026 3:00 AM
Business Wire
Gli agenti di intelligenza artificiale aziendale ora possono funzionare su larga scala con governance integrata attraverso il nuovo JFrog Agent Skills Registry, un sistema sicuro di registrazione per MCP, modelli, competenze degli agenti e asset binari agentici


NVIDIA GTC – JFrog Ltd. (Nasdaq: FROG), la società di Liquid Software, creatrice della JFrog Software Supply Chain Platform, il sistema di registrazione per artefatti software, binari e asset AI, ha presentato il suo nuovo JFrog Agent Skills Registry. Validato dall'integrazione iniziale con NVIDIA, la piattaforma software offre governance e un livello di fiducia verificabile richiesto per consentire alle forze lavoro agentiche di operare in modo sicuro a ritmo e su scala aziendale.

Questo comunicato stampa include contenuti multimediali. Visualizzare l’intero comunicato qui: https://www.businesswire.com/news/home/20260408371420/it/Il nuovo JFrog Agent Skills Registry supporterà NVIDIA Agent Toolkit, incluso NVIDIA NemoClaw, per fornire la governance e il livello di fiducia verificabile necessari affinché le forze lavoro basate su agenti operino in modo sicuro alla velocità e alla scala aziendali.
Il nuovo JFrog Agent Skills Registry supporterà NVIDIA Agent Toolkit, compreso NVIDIA NemoClaw, un ambiente di esecuzione open source per la creazione e la distribuzione di agenti di AI sicuri, autonomi e a lungo termine. JFrog Agent Skills Registry è realizzato per fornire la governance e il livello di fiducia verificabile richiesto per le forze lavoro agentiche per operare in modo sicuro a di agenti di AI e su scala aziendale. Inoltre, JFrog Artifactory servirà da registry per i modelli di AI e le competenze degli agenti con NVIDIA AI-Q Blueprint, come parte del NVIDIA Agent Toolkit.


“Gli agenti AI stanno praticamente ridefinendo il modo in cui il software viene creato ed eseguito, ma senza un livello di fiducia dedicato per applicare la governance e i flussi di lavoro sicuri, questi introducono un notevole rischio aziendale”, dichiarato Gal Marder, Chief Strategy Officer di JFrog. “Proprio come un pacchetto di software nocivo può compromettere un'applicazione, una competenza non verificata può portare un agente a eseguire azioni dannose. Per distribuire agenti autonomi su scala, le organizzazioni devono andare oltre la fiducia cieca. Collaborando a stretto contatto con il team di Enterprise AI Factory di NVIDIA, stiamo definendo un sistema di registrazione affidabile per archiviare, scansionare e governare tutti gli asset binari agentici nell'intera catena di fornitura del software”.


La rapida evoluzione dell'AI ha prodotto agenti autonomi, che si basano su competenze, una parte standard della catena di fornitura del software. Tuttavia è necessario uno strato infrastrutturale sottostante per applicare le policy, la sicurezza e i controlli sulla privacy necessari per renderli sicuri per l'uso. Senza un'infrastruttura standardizzata, le organizzazioni devono affrontare rischi di sicurezza e conformità senza precedenti, come dimostrato dalle recenti manipolazioni e violazioni di OpenClaw.


La soluzione universale di JFrog supporta tutti gli agenti, incluso NVIDIA NemoClaw, fornendo un livello di fiducia per:



Migliorare la sicurezza e la governance di tutti gli MCP, le competenze degli agenti, i modelli e i pacchetti software utilizzando un'unica fonte di verità per scansionare e bloccare quelli con intenti malevoli o vulnerabilità.



Consentire l'adozione sicura e la scalabilità di agenti autonomi e a lungo termine senza aumentare i rischi o compromettere la conformità.



Alimentare i flussi di lavoro agentici e l'innovazione degli sviluppatori in tutta l'azienda, in modo sicuro e continuo, senza interruzioni.



“La sicurezza e la governance sono essenziali per distribuire gli agenti AI nell'azienda", ha dichiarato Pat Lee, vicepresidente, Enterprise Partnerships, NVIDIA. “JFrog Agent Skills Registry per NVIDIA NemoClaw supporta la sicurezza e il controllo per distribuire agenti a lungo termine per aiutare a incrementare la produttività aziendale con nuovi potenti strumenti di AI”.


Stabilendo la piattaforma JFrog come registro integrato e sicuro per NVIDIA AI-Q Blueprint e il runtime NVIDIA NemoClaw, le aziende saranno in grado di gestire in sicurezza gli agenti utilizzando competenze verificate, server MCP, modelli e pacchetti software. I team di NVIDIA e JFrog hanno collaborato per validare un flusso di lavoro per l'acquisizione e la gestione di Artifactory come registro delle competenze, compreso il supporto per le competenze sviluppate da NVIDIA, utilizzando NVIDIA cuOpt come primo esempio di una competenza predefinita. Questa integrazione fornisce a NVIDIA un unico endpoint governato per distribuire competenze AI verificate in tutte le piattaforme di agenti, con un modello di promozione che impone crescenti barriere di sicurezza dall'uso del team a quello dell'intera azienda.


La nuova offerta di JFrog comprende:



NVIDIA AI-Q Blueprint certificato: JFrog Platform è validata per NVIDIA AI-Q Blueprint per la gestione del ciclo di vita e la governance delle competenze degli agenti.



Integrazione nativa NVIDIA NemoClaw: JFrog Artifactory si integra in modo nativo con il runtime NVIDIA NemoClaw, progettato per fornire risorse sicure, private e scansionate.



Sistema di registrazione centralizzato: JFrog AI Catalog e Agent Skills Registry fungono da piano di controllo centrale per NVIDIA NemoClaw, fornendo un'unica fonte di verità per tracciare, verificare e gestire la provenienza degli agenti, di NVIDIA NIM e dei server MCP.



Agenti e comportamenti sicuri: JFrog AI Catalog scansiona, verifica e firma automaticamente tutte le competenze AI al momento del caricamento per rilevare vulnerabilità, payload malevoli e rischi di conformità prima che NVIDIA NemoClaw o altri agenti possano mai adottarli.



Governance e controllo basati sulle policy: la piattaforma JFrog consente alle organizzazioni di impostare flussi di lavoro di approvazione rigorosi, garantendo che gli sviluppatori e gli agenti AI possano accedere solo a competenze autorizzate e verificate per progetti e unità aziendali specifici. Il runtime NVIDIA NemoClaw isola quindi ogni agente in un ambiente virtuale protetto, consentendo l'esecuzione sicura del codice senza il rischio di un'infezione più ampia della rete.



Per saperne di più su come JFrog e NVIDIA stanno proteggendo il futuro della catena di fornitura del software dell'AI agentica, leggere questo blog sul JFrog Agent Skills Registry o visitare la pagina delle soluzioni.


Se piace questo articolo? Condividilo su X: @JFrog collabora con @NVIDIA per fornire un livello di fiducia per governare, scansionare e proteggere le competenze e gli strumenti degli agenti nella #softwaresupplychain. Per saperne di più, visitare: https://bit.ly/4t6TF75 #DevGovOps #DevSecOps #security #GTC


Avvertenza sulle dichiarazioni previsionali


Il presente comunicato stampa contiene dichiarazioni “previsionali”, così come definite dalle leggi federali statunitensi sui titoli, incluse, a titolo esemplificativo ma non esaustivo, le dichiarazioni riguardanti le nostre aspettative in merito alle prestazioni previste del JFrog Agent Skills Registry.


Le presenti dichiarazioni previsionali si basano sulle nostre attuali ipotesi, aspettative e convinzioni e sono soggette a rischi significativi, incertezze, ipotesi e cambiamenti di circostanze che potrebbero far sì che i risultati, le prestazioni o i traguardi effettivi di JFrog differiscano in modo sostanziale da quelli espressi o impliciti in qualsiasi dichiarazione previsionale. Esiste un numero significativo di fattori che potrebbero causare tali differenze sostanziali rispetto alle dichiarazioni contenute nel presente comunicato stampa, inclusi, a titolo esemplificativo ma non esaustivo, i rischi descritti nei documenti depositati presso la Securities and Exchange Commission, tra cui la nostra relazione annuale sul modulo 10-K per l’anno concluso il 31 dicembre 2025, le nostre relazioni trimestrali sul modulo 10-Q e altri documenti e rapporti che potremmo depositare di volta in volta presso la Securities and Exchange Commission. Le dichiarazioni previsionali riflettono le nostre convinzioni e ipotesi esclusivamente alla data del presente comunicato stampa. Decliniamo qualsiasi obbligo di aggiornare tali dichiarazioni previsionali, salvo quanto richiesto dalla legge.


Informazioni su JFrog


JFrog Ltd. (Nasdaq: FROG), i creatori della piattaforma unificata DevOps, DevSecOps, DevGovOps e MLOps, ha la missione di creare un mondo di software affidabile senza attrito dallo sviluppo alla produzione. Guidata da una visione di “Liquid Software”, la JFrog Platform è un sistema di catena di fornitura di registrazione progettato per alimentare le organizzazioni mentre creano, gestiscono, governano e distribuiscono software sicuro con rapidità e su larga scala. Le funzionalità di sicurezza olistica aiutano a identificare, proteggere e rimediare contro minacce e vulnerabilità. La JFrog Platform universale, ibrida e multicloud è disponibile sia come servizi SaaS in tutti i principali fornitori di servizi cloud sia in modalità self-hosted. Milioni di utenti e circa 6.600 organizzazioni in tutto il mondo, tra cui gran parte delle aziende Fortune 100, dipendono dalle soluzioni JFrog per accogliere la trasformazione digitale in modo sicuro nell'era dell'IA. Per saperne di più, visitare www.jfrog.com o seguire l'azienda su X @JFrog.


Il testo originale del presente annuncio, redatto nella lingua di partenza, è la versione ufficiale che fa fede. Le traduzioni sono offerte unicamente per comodità del lettore e devono rinviare al testo in lingua originale, che è l'unico giuridicamente valido.

Vedi la versione originale su businesswire.com: https://www.businesswire.com/news/home/20260408371420/it/
Contatto per i media:

Siobhan Lyons, Direttore, Comunicazioni globali, siobhanL@jfrog.com


Contatto per gli investitori:

Jeff Schreiner, VP, Relazioni con gli investitori, jeffS@jfrog.com


Original: JFrog offre un livello di fiducia per il software basato sull'AI con NVIDIA

JFrog Brings Enterprise-Grade Software Supply Chain Security to Over 1M AI Developers with New Cursor AI Coding AgentMarch 31, 2026 4:05 PM
Business Wire
JFrog Platform plugin for Cursor gives developers the freedom to create and deliver next generation AI-powered software with built-in governance


JFrog Ltd (Nasdaq: FROG), the creators of the JFrog Software Supply Chain Platform, the system of record for trusted software artifacts, binaries, and AI assets, announced its Platform is now available in the Cursor marketplace. Over 1 million Cursor active daily users now have access to robust software supply chain security within their workflows via the new plugin, reinforcing JFrog’s position as a critical trust layer and system of record for the rapidly expanding AI agent ecosystem.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260331236809/en/The new JFrog Platform plugin for Cursor gives developers the freedom to create and deliver next generation AI-powered software with built-in governance.
“Today’s enterprises wanting to fully leverage AI-driven software creation are rightfully concerned about the security risks open source and autonomous tools used by AI will create,” said Yoav Landman, Co-Founder and CTO of JFrog. “Issues like Shadow AI, ungoverned MCP server access, malicious skills, and uncontrolled dependencies can create massive blind spots and lead to significant security vulnerabilities. By bringing the full power of the JFrog Platform directly into the Cursor coding agent, we are giving enterprises the guardrails they demand from the very beginning.”


IDC research states: “As enterprises transition from simple chatbots to autonomous AI agents, the need for security and governance has moved from the model itself to the actions those models take…However, challenges remain since the market for AI governance is rapidly evolving, with new entrants and approaches emerging. Standards for agentic components, such as skills and MCP servers, are still in flux. In addition, enterprises are still in the early stages of adopting autonomous agents, and the pace of adoption may vary significantly across industries.”1


Empowering a Diverse Ecosystem of AI Builders with Seamless Security and Governance


Cursor is one of the industry’s leading AI coding agents designed for developers, data scientists, and engineers, that emphasizes agentic capabilities via plugins and MCP servers (not just UI extensions like the VS Code marketplace). Modern developer workflows start inside AI-native Integrated Developer Environments (IDEs) like Cursor, where agents suggest code, pull dependencies, and make supply chain decisions in real time. However, agents often do this without any visibility into whether packages are safe, compliant, or policy approved.


Building upon its recently announced JFrog Agent Skills Registry – a unified repository to centrally manage, govern, and version control AI skills across all environments by treating them as software packages – the new JFrog Cursor plugin brings the full power of the JFrog Platform directly into the developer’s AI-native IDE without context switching or manual lookups, eliminating friction. Enterprises can now leverage JFrog as a system of record and control point designed for agentic development to allow for increased accuracy, consistency, and security across AI pipelines and the software supply chain.


The new plugin ships with four integrated components:



A remote MCP server connection: Authenticated seamlessly with the JFrog Platform via OAuth without the need for API keys.



Conversational AI Skills: Enables developers to manage artifacts, scan for vulnerabilities, and enforce policies using natural language interactions.



Automated Security Rules: Automatically enforces supply-chain best practices whenever a dependency file is touched.



Dedicated Supply Chain Security: Proactively audits dependencies for CVEs, license risks, and curation policy violations.



Additionally, the JFrog Platform plugin for Cursor offers seamless integration with JFrog Xray and JFrog Advanced Security, allowing vulnerabilities, exposed secrets, and infrastructure misconfigurations to be flagged as developers code. It also provides real-time security insights with clear context, along with easy-to-follow remediation advice and one-click dependency upgrades. The JFrog plugin for Cursor also provides AI agents with the necessary information and guidance to check dependencies in real-time, ensuring every software component is fully compliant with organizational standards and safe for use before it is ever committed.


The JFrog Platform plugin has been officially verified by Cursor and is available immediately in the Cursor marketplace and in GitHub. Users can browse and install the plugin directly through the marketplace panel within the editor or by visiting cursor.com/marketplace (marketplace access details provided in user prompt). Furthermore, customers using the recently announced JFrog MCP Registry can access a repository of pre-approved local and remote MCP servers directly from their preferred coding agents, inclusive of Claude Code, Cursor, and VS Code Copilot.


For more information on the new JFrog Platform plugin for Cursor read this blog or visit the support page here https://docs.jfrog.com/security/docs/cursor-1.


Like this Story? Share this on X: The future of software is autonomous, but it shouldn't be unmanaged! Our award-winning JFrog Platform is now available as a plugin in the @Cursor Marketplace. Bring enterprise-grade #softwaresupplychainsecurity into your AI-native IDE to catch #vulnerabilities, license risks, and policy violations before your code is ever committed. Build a foundation of trust so your #AI agents can scale as fast as your ambition. Learn more: https://bit.ly/47xnF3s #DevSecOps #security #DevGovOps


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.


Cautionary Note About Forward-Looking Statements


This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including, but not limited to, statements regarding our expectations with respect to the anticipated performance of the JFrog Platform plugin for Cursor.


These forward-looking statements are based on our current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement. There are a significant number of factors that could cause actual results, performance or achievements to differ materially from statements made in this press release, including but not limited to risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements except as required by law.


1 Source: "JFrog Establishes a Trust Layer for Agentic AI: Extending the Software Supply Chain to Skills, Models, and MCPs," by Jim Mercer, IDC Research, March 23, 2026.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260331236809/en/
Media Contact:

Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com


Investor Contact:

Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com


Original: JFrog Brings Enterprise-Grade Software Supply Chain Security to Over 1M AI Developers with New Cursor AI Coding Agent

JFrog Unveils Universal MCP Registry, Delivering a Secure System of Record for the AI-Driven Software Supply ChainMarch 18, 2026 9:15 AM
Business Wire
New JFrog MCP Registry provides a single source of truth to store and manage MCP servers from all vendors, while monitoring enterprise AI connections and instantly blocking unsafe developer tools


JFrog Ltd (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, the system of record for software artifacts, binaries, and AI assets, today introduced its JFrog MCP Registry. Expanding on current capabilities in JFrog AI Catalog, the new registry acts as a single source of truth for securely governing Model Context Protocol (MCP) Servers, helping companies transition AI usage from an enterprise-wide compliance and security risk into a competitive advantage.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260318132919/en/Expanding on current capabilities in JFrog AI Catalog, the new JFrog MCP Registry acts as a single source of truth for securely governing Model Context Protocol (MCP) Servers, helping companies transition AI usage from an enterprise-wide compliance and security risk into a competitive advantage.
“Today, developers across the enterprise are rapidly adopting MCP servers from multiple AI tools and vendors, creating a growing challenge for organizations that lack the visibility and control to monitor these connections,” said Yuval Fernbach, CTO, JFrog MLOps. “We’re witnessing a fundamental shift in how software is built and deployed, with AI agents becoming active participants in the software supply chain. This innovation cannot come at the expense of security, visibility, control, or compliance. By establishing a system of record for MCP server usage, and treating them like any other binary asset, organizations can confidently innovate at scale while maintaining the trust and control required across the AI-driven software supply chain.”


The Hidden Risks of Unmanaged MCP Servers


As AI shifts from simple chat interfaces to autonomous, long-running agents, developers rely on MCP servers to act as "enablers of integration," giving AI models direct access to internal and external enterprise systems, APIs, and data. However, these servers, which act as trusted intermediaries, can also execute arbitrary, potentially malicious code directly on a user's machine or on remote systems with high privileges. If left unmanaged, they expose organizations to severe risks, including prompt hijacking vulnerabilities, over-privileged access, and credential exposure.


This need for AI governance is backed by Gartner research1, stating that security and AI leaders must establish MCPs as the foundational method for agents to communicate with external resources by implementing a centralized MCP server registry, enforcing layered security controls, and defining clear ownership and governance policies.


Delivering a System of Record for MCP Servers: The JFrog MCP Registry


The new JFrog MCP Registry provides a system of record and AI infrastructure trust layer for all MCP Servers, agent skills, models, and agentic binary assets. By treating MCP servers with the same rigorous security standards as software packages, the JFrog MCP Registry helps eliminate blind spots across the AI software supply chain. At its core the JFrog MCP Registry is designed to bring:



Native security by design to proactively block the download and execution of malicious or non-compliant MCP servers, otherwise pulled naively by humans or AI agents, rather than waiting for an issue to occur and remediating it after the fact.



Centralized governance and management enabling developers to instantly access a registry of pre-approved local and remote MCP servers directly from their Integrated Development Environments (e.g., Claude Code, Cursor, VS-Code).



Enterprise-grade policy enforcement on every agentic workflow, replacing "blind trust" with granular control, by treating every MCP server as a governed artifact with centralized discovery, configuration and project-level permissions management alongside all other AI models and software artifacts in a unified AI Catalog.



Platform universality, which allows companies to seamlessly manage agent ecosystems from private marketplaces and across vendors, enabling teams to seamlessly switch coding agents without ever needing to rebuild their secure system of record.



The JFrog MCP Registry is available immediately as part of JFrog AI Catalog. To learn more about how it works, read this blog, visit https://jfrog.com/ai-catalog/mcp-registry, or register for the “The Right Tools for the Job: Securing Your AI Agents” webinar on March 31 at 10 AM PST.


Like this Story? Share this on X: Secure and compliant adoption of #AI technology is key to innovating without sacrificing visibility and control. JFrog MCP Registry gives companies the ability to manage the risks associated with agentic AI and automated workflows, without stifling innovation. Learn more: https://bit.ly/4sRXTPJ #MCP #AI #softwaresupplychainn #security #DevGovOps


Cautionary Note About Forward-Looking Statements


This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including, but not limited to, statements regarding our expectations with respect to the anticipated performance of JFrog MCP Registry.


These forward-looking statements are based on our current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement. There are a significant number of factors that could cause actual results, performance or achievements to differ materially from statements made in this press release, including but not limited to risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements except as required by law.


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.


1 Source: Gartner: Adopt MCP as a Strategic Approach for integrating AI Solutions, 7 November 2025.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260318132919/en/
Media Contact:

Siobhan Lyons, Director, Global Communications, siobhanL@jfrog.com


Investor Contact:

Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com


Original: JFrog Unveils Universal MCP Registry, Delivering a Secure System of Record for the AI-Driven Software Supply Chain

JFrog Announces $300 Million Share Repurchase ProgramFebruary 26, 2026 9:15 AM
Business Wire
JFrog Ltd. (“JFrog”) (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, today announced that its Board of Directors has authorized a share repurchase program of up to $300 million of the Company’s ordinary shares.


The repurchase approval reflects JFrog’s confidence in executing on its strategy and its conviction in significant, durable growth opportunities.


Backed by a strong balance sheet and consistent free cash flow generation, JFrog is well-positioned to return capital to shareholders while maintaining flexibility to invest in strategic growth initiatives.


Company securities may be repurchased from time to time using a variety of methods, which may include open market purchases, privately negotiated transactions or otherwise, under the U.S. Securities Exchange Act of 1934, as amended, in accordance with U.S. securities laws and regulations. The repurchase program does not obligate the Company to acquire any particular amount of securities, and the repurchase program may be suspended or discontinued at any time at the Company's discretion.


The actual timing, number and value of securities repurchased depend on a number of factors, including the market price of the Company's ordinary shares, general market and economic conditions, the Company's financial results and liquidity, and other considerations. The Company expects to fund repurchases with cash on hand and future cash generated from its operations.


Repurchases under the repurchase program may begin after conclusion of the 30-day period for creditors of the Company to object to the Company's intent to perform the distribution by way of repurchase in accordance with the Israeli Companies Regulations (Relief for Public Companies Whose Securities are Traded on Stock Exchanges Outside of Israel), 5760-2000 and the Israeli Regulations (Approval of Distribution), 5761–2001.


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.


Forward-Looking Statements


This press release contains “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including but not limited to statements relating to the amount, timing and execution of, and other details about repurchases under the repurchase program.


Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements except as required by law.


Our actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025 filed on February 13, 2026, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260226464606/en/
Investor Contact:

Jeff Schreiner, VP of Investor Relations, jeffS@jfrog.com


Original: JFrog Announces $300 Million Share Repurchase Program

JFrog to Present at Upcoming Investor ConferencesFebruary 23, 2026 4:05 PM
Business Wire
JFrog Ltd. (“JFrog”) (Nasdaq: FROG), the Liquid Software Company and creators of the JFrog Software Supply Chain Platform, today announced that it will present at the following investor conferences during the first quarter of 2026:



Morgan Stanley Technology, Media & Telecom Conference in San Francisco, California, Monday, March 2nd, at 11:30 a.m. Pacific Daylight Time



Raymond James Institutional Investor Conference in Orlando, Florida, Wednesday, March 4th, at 10:40 a.m. Pacific Daylight Time



Cantor Global Technology & Industrial Growth Conference in New York, New York, Wednesday, March 11th, at 7:00 a.m. Pacific Daylight Time



The live webcasts and replays will be available on JFrog’s investor relations website: https://investors.jfrog.com/events-and-presentations/events.


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260223386931/en/
Investor Contact:

Jeff Schreiner

jeffs@jfrog.com


Original: JFrog to Present at Upcoming Investor Conferences

JFrog Announces Fourth Quarter and Fiscal 2025 ResultsFebruary 12, 2026 4:05 PM
Business Wire

Total fiscal 2025 Revenues of $531.8 million; up 24% Year-over-Year



Fiscal 2025 Cloud Revenues of $243.3 million; up 45% Year-over-Year



Customers with ARR greater than $1 million equaled 74, up 42% Year-over-Year



Fiscal 2025 JFrog Security Core equaled 7% of Revenue, 10% of ARR and 16% of RPO



Ending RPO totaled $566 million, a 40% increase year over year



JFrog Ltd. (“JFrog”) (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, today announced financial results for its fourth quarter and fiscal year 2025 ended December 31, 2025.


“Developers and AI coding agents are now building and releasing software together at unprecedented speed. Automation, security, and governance must be embedded from the get-go,” said Shlomi Ben Haim, CEO and Co-founder of JFrog. “Our 2025 performance reflects strong execution of our strategy to serve as the System of Record for all software artifacts, and it demonstrates how deeply companies are embracing the JFrog Platform as they adopt AI to manage and secure their software supply chains. We enter 2026 with strong momentum, positioned to power the next era of software delivery, jointly driven by AI agents and human developers.”


Fourth Quarter 2025 Financial Highlights



Revenue for the fourth quarter of 2025 was $145.3 million, up 25% year-over-year.



GAAP Gross Profit was $113.1 million; GAAP Gross Margin was 77.9%.



Non-GAAP Gross Profit was $121.6 million; Non-GAAP Gross Margin was 83.7%.



GAAP Operating Loss was ($21.3) million; GAAP Operating Margin was (14.7%).



Non-GAAP Operating Income was $25.7 million; Non-GAAP Operating Margin was 17.7%.



GAAP Net Loss Per Share was ($0.13); Non-GAAP Diluted Earnings Per Share was $0.22.



Operating Cash Flow was $50.7 million; Free Cash Flow of $49.9 million.



Cash, Cash Equivalents and Investments were $704.4 million as of December 31, 2025.



Remaining performance obligations were $565.7 million as of December 31, 2025.



Fiscal 2025 Financial Highlights



Revenue for fiscal 2025 was $531.8 million, up 24% year-over-year.



GAAP Gross Profit was $408.4 million; GAAP Gross Margin was 76.8%.



Non-GAAP Gross Profit was $443.3 million; Non-GAAP Gross Margin was 83.3%.



GAAP Operating Loss was ($91.9) million; GAAP Operating Margin was (17.3%).



Non-GAAP Operating Income was $92.1 million; Non-GAAP Operating Margin was 17.3%.



GAAP Net Loss Per Share was ($0.62); Non-GAAP Diluted Earnings Per Share was $0.82.



Operating Cash Flow was $145.7 million; Free Cash Flow of $142.3 million.



Recent Business & Product Highlights



Cloud revenue equaled $70.2 million during the fourth quarter of 2025, an increase of 42% year-over-year. Cloud revenue represented 48% of total revenue, compared to 43% in the year-ago period.



Net Dollar Retention rate for the trailing four quarters was 119%.



Customers with greater than $1 million ARR increased to 74, up from 52 in the year-ago period.



Customers with greater than $100K ARR increased to 1,168, compared with 1,018 in the year-ago period.



Customers adopting the end-to-end JFrog Platform Enterprise+ subscription represented 57% of total revenue during the fourth quarter of 2025, versus 54% in the year-ago period.



Launched Shadow AI detection capabilities to guard against unauthorized usage of AI models and APIs.



Named GitHub 2025 “Tech Partner of the Year,” jointly powering DevSecOps and AI.



Revealed Total Economic Impact of 282% ROI on JFrog Security solutions via Forrester Consulting commissioned study.



Announced appointment of Genefa Murphy as JFrog’s Chief Marketing Officer, effective January 5, 2026.



First Quarter and Fiscal Year 2026 Outlook



First Quarter 2026 Outlook:


Revenue between $146 million and $148 million



Non-GAAP operating income between $25 million and $26 million



Non-GAAP net income per diluted share between $0.20 and $0.22, assuming approximately 127 million weighted average diluted shares outstanding






Fiscal Year 2026 Outlook:


Revenue between $623 million to $628 million



Non-GAAP operating income between $106 million and $108 million



Non-GAAP net income per diluted share between $0.88 and $0.92, assuming approximately 128 million weighted average diluted shares outstanding






The section titled "Non-GAAP Financial Information" below describes our usage of non-GAAP financial measures. Reconciliations between historical GAAP and non-GAAP information are contained at the end of this press release following the accompanying financial data.


Conference Call Details



Event: JFrog’s Fourth Quarter and 2025 Financial Results Conference Call



Date: Thursday, February 12, 2026



Time: 2:00 p.m. PT (5:00 p.m. ET)



A live webcast of the conference call will be accessible from the investor relations website at https://investors.jfrog.com/events-and-presentations.


About JFrog


JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision, the JFrog Platform is a software supply chain system of record that is designed to power organizations as they build, manage, and distribute secure software with speed and scale. Holistic security features help identify, protect, and remediate against threats and vulnerabilities. The universal, hybrid, multi-cloud JFrog Platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era. Learn more at www.jfrog.com or follow us on X @JFrog.


Forward-Looking Statements:


This press release and the earnings call referencing this press release contain “forward-looking” statements, as that term is defined under the U.S. federal securities laws, including but not limited to statements regarding JFrog’s future financial performance, including our outlook for the first quarter and for the full year of 2026, expectations regarding the market and revenue potential for the JFrog Platform, including JFrog Artifactory, JFrog Xray, JFrog Curation, JFrog Advanced Security, JFrog ML, JFrog AppTrust, JFrog AI Catalog and JFrog Runtime Security, and including the efficacy and benefit of integrating of any of the foregoing with other products and platform, our expectations regarding the mission-critical nature of the “JFrog Platform” to our customers’ infrastructure and its growth potential, the growth potential of our cloud business, including hybrid and multi-cloud, our expectations regarding potential for growth in and market opportunities within DevOps, DevSecOps, DevGovOps, Security, AI, and MLOps, our ability to provide effective tools and solutions to detect and remediate security vulnerabilities, our expectations regarding our strategic integrations and collaborations, the ability of our strategic sales team to grow the business across top-tier accounts, our ability to expand usage of our platform in the government and commercial sectors, our ability to contribute data to global security standards bodies, our ability to innovate and meet market demands and the software supply chain needs of our customers and our expectations regarding the integration and adoption of MLOps technologies into our business, including our ability to successfully integrate into our business operations, and expectations regarding customer expansions.


These forward-looking statements are based on JFrog’s current assumptions, expectations and beliefs and are subject to substantial risks, uncertainties, assumptions and changes in circumstances that may cause JFrog’s actual results, performance or achievements to differ materially from those expressed or implied in any forward-looking statement.


There are a significant number of factors that could cause actual results to differ materially from statements made in this press release and our earnings call, including but not limited to: risks associated with managing our rapid growth; our history of losses; our limited operating history; our ability to retain and upgrade existing customers our ability to attract new customers; our ability to effectively develop and expand our sales and marketing capabilities; our ability to integrate and realize anticipated synergies from acquisitions of complementary businesses and our strategic collaborations; risk of a security breach incident or product vulnerability; risk of interruptions or performance problems associated with our products and platform capabilities; our ability to adapt and respond to rapidly changing technology or customer needs; our ability to compete in the markets in which we participate; our ability to successfully integrate technology from acquisitions into our offerings; our ability to provide continuity to our respective customers and realize innovation following our acquisitions; and general market, political, economic, and business conditions, including uncertainty in the current macroeconomic environment. Our actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in our filings with the Securities and Exchange Commission, including in our annual report on Form 10-K for the year ended December 31, 2025 to be filed on February 13, 2026, our quarterly reports on Form 10-Q, and other filings and reports that we may file from time to time with the Securities and Exchange Commission. Forward-looking statements represent our beliefs and assumptions only as of the date of this press release. We disclaim any obligation to update forward-looking statements.


About Non-GAAP Financial Measures:


JFrog discloses the following non-GAAP financial measures in this release and the earnings call referencing this press release: non-GAAP operating income (loss), non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses (research and development, sales and marketing, general and administrative), non-GAAP operating margin, non-GAAP net income (loss), non-GAAP net income (loss) per diluted share, non-GAAP net income (loss) per basic share, and free cash flow. JFrog uses each of these non-GAAP financial measures internally to understand and compare operating results across accounting periods, for internal budgeting and forecasting purposes, for short- and long-term operating plans, and to evaluate JFrog’s financial performance. JFrog believes they are useful to investors, as a supplement to GAAP measures, in evaluating its operational performance, as further discussed below. JFrog’s non-GAAP financial measures may not provide information that is directly comparable to that provided by other companies in its industry, as other companies in its industry may calculate non-GAAP financial results differently, particularly related to non-recurring and unusual items. In addition, there are limitations in using non-GAAP financial measures because the non-GAAP financial measures are not prepared in accordance with GAAP and may be different from non-GAAP financial measures used by other companies and exclude expenses that may have a material impact on JFrog’s reported financial results.


Non-GAAP financial measures should not be considered in isolation from, or as a substitute for, financial information prepared in accordance with GAAP. A reconciliation of the historical non-GAAP financial measures to their most directly comparable GAAP measures has been provided in the financial statement tables included below in this press release. A reconciliation of non-GAAP guidance measures to corresponding GAAP measures is not available on a forward-looking basis without unreasonable effort due to the uncertainty regarding, and the potential variability of, reconciling items that may be incurred in the future such as share-based compensation, the effect of which may be significant.


JFrog defines non-GAAP gross profit, non-GAAP operating expenses (research and development, sales and marketing, general and administrative), non-GAAP gross margin, non-GAAP operating margin, non-GAAP operating income (loss) and non-GAAP net income (loss) as the respective GAAP balances, adjusted for, as applicable: (1) share-based compensation expense; (2) the amortization of acquired intangibles; (3) acquisition-related costs; and (4) income tax effects. JFrog defines free cash flow as Net cash provided by (used in) operating activities, minus capital expenditures. Investors are encouraged to review the reconciliation of these historical non-GAAP financial measures to their most directly comparable GAAP financial measures.


Management believes these non-GAAP financial measures are useful to investors and others in assessing JFrog’s operating performance due to the following factors:


Share-based compensation. JFrog utilizes share-based compensation to attract and retain employees. It is principally aimed at aligning their interests with those of its shareholders and at long-term retention, rather than to address operational performance for any particular period. As a result, share-based compensation expenses vary for reasons that are generally unrelated to financial and operational performance in any particular period.


Amortization of acquired intangibles. JFrog views amortization of acquired intangible assets as items arising from pre-acquisition activities determined at the time of an acquisition. While these intangible assets are evaluated for impairment regularly, amortization of the cost of acquired intangibles is an expense that is not typically affected by operations during any particular period.


Acquisition-related costs. Acquisition-related costs include expenses related to acquisitions of other companies. JFrog views acquisition-related costs as expenses that are not necessarily reflective of operational performance during a period.


Income tax effects. JFrog’s non-GAAP financial results are adjusted for income tax effects related to these non-GAAP adjustments and changes in our assessment regarding the realizability of our deferred tax assets, if any. Excluding income tax effects of non-GAAP adjustments provides a more accurate view of JFrog’s operating results.


Non-GAAP weighted average share count. Diluted GAAP and non-GAAP weighted-average shares are the same, except in periods that there is a GAAP loss and a non-GAAP income. The non-GAAP weighted-average shares used to compute the non-GAAP net income per share - diluted are adjusted to reflect dilution equal to the dilutive impact had there been GAAP income.


Additionally, JFrog’s management believes that the non-GAAP financial measure, free cash flow, is meaningful to investors because management reviews cash flows generated from operations after taking into consideration capital expenditures due to the fact that these expenditures are considered to be a necessary component of ongoing operations.


Operating Metrics


JFrog’s number of customers with annual recurring revenue (“ARR”) of $100,000 or more is based on the ARR of each customer, as of the last month of the quarter. JFrog’s number of customers with ARR of $1 million or more is based on the ARR of each customer, as of the last month of the quarter. JFrog defines ARR as the annualized revenue run-rate of subscription agreements from all customers as of the last month of the quarter. The ARR includes monthly subscription customers, so long as JFrog generates revenue from these customers. JFrog annualizes its monthly subscriptions by taking the revenue it would contractually expect to receive from such customers in a given month and multiplying it by 12.


JFrog’s net dollar retention rate compares its ARR from the same set of customers across comparable periods. JFrog calculates net dollar retention rate by first identifying customers (the “Base Customers”), which were customers in the last month of a particular quarter (the “Base Quarter”). JFrog then calculates the contracted ARR from these Base Customers in the last month of the same quarter of the subsequent year (the “Comparison Quarter”). This calculation captures upsells, contraction, and attrition since the Base Quarter. JFrog then divides total Comparison Quarter ARR by total Base Quarter ARR for Base Customers. JFrog’s net dollar retention rate in a particular quarter is obtained by averaging the result from that particular quarter with the corresponding results from each of the prior three quarters.




JFROG LTD.








CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS








(in thousands, except per share data; unaudited)








 













 



 






 






Three Months Ended

December 31,






 






 






Year Ended

December 31,






 








 






 






2025






 






 






2024






 






 






2025






 






 






2024






 








Revenue:






 






 






 






 






 






 






 






 






 






 






 






 








Subscription—self-managed and SaaS






 






$






136,408






 






 






$






109,606






 






 






$






502,796






 






 






$






406,903






 








License—self-managed






 






 






8,898






 






 






 






6,472






 






 






 






29,044






 






 






 






21,585






 








Total subscription revenue






 






 






145,306






 






 






 






116,078






 






 






 






531,840






 






 






 






428,488






 








Cost of revenue:






 






 






 






 






 






 






 






 






 






 






 






 








Subscription—self-managed and SaaS(1)(2)(3)






 






 






32,170






 






 






 






28,395






 






 






 






123,337






 






 






 






97,758






 








License—self-managed(3)






 






 






—






 






 






 






117






 






 






 






116






 






 






 






542






 








Total cost of revenue—subscription






 






 






32,170






 






 






 






28,512






 






 






 






123,453






 






 






 






98,300






 








Gross profit






 






 






113,136






 






 






 






87,566






 






 






 






408,387






 






 






 






330,188






 








Operating expenses:






 






 






 






 






 






 






 






 






 






 






 






 








Research and development(1)(2)






 






 






53,163






 






 






 






44,919






 






 






 






195,089






 






 






 






160,864






 








Sales and marketing(1)(2)(3)






 






 






59,720






 






 






 






49,978






 






 






 






223,932






 






 






 






190,401






 








General and administrative(1)(2)






 






 






21,575






 






 






 






18,084






 






 






 






81,219






 






 






 






70,021






 








Total operating expenses






 






 






134,458






 






 






 






112,981






 






 






 






500,240






 






 






 






421,286






 








Operating loss






 






 






(21,322






)






 






 






(25,415






)






 






 






(91,853






)






 






 






(91,098






)








Interest and other income, net






 






 






6,869






 






 






 






5,588






 






 






 






25,816






 






 






 






25,278






 








Loss before income taxes






 






 






(14,453






)






 






 






(19,827






)






 






 






(66,037






)






 






 






(65,820






)








Income tax expense






 






 






757






 






 






 






3,371






 






 






 






5,782






 






 






 






3,416






 








Net loss






 






$






(15,210






)






 






$






(23,198






)






 






$






(71,819






)






 






$






(69,236






)








Net loss per share, basic and diluted






 






$






(0.13






)






 






$






(0.21






)






 






$






(0.62






)






 






$






(0.63






)








Weighted-average shares used in computing net loss per share, basic and diluted






 






 






118,773






 






 






 






111,985






 






 






 






116,201






 






 






 






109,691






 








 






 






 






 






 






 






 






 






 






 






 






 






 








(1) Includes share-based compensation expense as follows:






 






 






 






 






 






 






 






 






 






 






 






 








Cost of revenue: subscription—self-managed and SaaS






 






$






3,938






 






 






$






4,352






 






 






$






16,768






 






 






$






14,555






 








Research and development






 






 






14,786






 






 






 






14,739






 






 






 






58,203






 






 






 






48,192






 








Sales and marketing






 






 






15,216






 






 






 






13,844






 






 






 






55,749






 






 






 






47,603






 








General and administrative






 






 






7,003






 






 






 






5,834






 






 






 






25,937






 






 






 






20,756






 








Total share-based compensation expense






 






$






40,943






 






 






$






38,769






 






 






$






156,657






 






 






$






131,106






 








 






 






 






 






 






 






 






 






 






 






 






 






 








(2) Includes acquisition-related costs as follows:






 






 






 






 






 






 






 






 






 






 






 






 








Cost of revenue: subscription–self-managed and SaaS






 






$






—






 






 






$






—






 






 






$






—






 






 






$






9






 








Research and development






 






 






961






 






 






 






1,177






 






 






 






4,413






 






 






 






3,782






 








Sales and marketing






 






 






471






 






 






 






477






 






 






 






1,857






 






 






 






1,087






 








General and administrative






 






 






19






 






 






 






24






 






 






 






68






 






 






 






880






 








Total acquisition-related costs






 






$






1,451






 






 






$






1,678






 






 






$






6,338






 






 






$






5,758






 








 






 






 






 






 






 






 






 






 






 






 






 






 








(3) Includes amortization of acquired intangibles as follows:






 






 






 






 






 






 






 






 






 






 






 






 








Cost of revenue: subscription–self-managed and SaaS






 






$






4,498






 






 






$






4,497






 






 






$






17,995






 






 






$






13,762






 








Cost of revenue: license—self-managed






 






 






—






 






 






 






117






 






 






 






116






 






 






 






542






 








Sales and marketing






 






 






175






 






 






 






1,299






 






 






 






2,807






 






 






 






3,274






 








Total amortization expense of acquired intangible assets






 






$






4,673






 






 






$






5,913






 






 






$






20,918






 






 






$






17,578






 









JFROG LTD.








CONDENSED CONSOLIDATED BALANCE SHEETS








(in thousands; unaudited)








 













 



 






 






December 31, 2025






 






 






December 31, 2024






 








Assets






 






 






 






 






 






 








Current assets:






 






 






 






 






 






 








Cash and cash equivalents






 






$






75,840






 






 






$






49,869






 








Short-term investments






 






 






628,574






 






 






 






472,138






 








Accounts receivable, net






 






 






119,948






 






 






 






90,712






 








Deferred contract acquisition costs






 






 






22,259






 






 






 






16,465






 








Prepaid expenses and other current assets






 






 






26,390






 






 






 






20,043






 








Total current assets






 






 






873,011






 






 






 






649,227






 








Property and equipment, net






 






 






5,536






 






 






 






5,668






 








Deferred contract acquisition costs, noncurrent






 






 






34,304






 






 






 






25,029






 








Operating lease right-of-use assets






 






 






12,063






 






 






 






14,202






 








Intangible assets, net






 






 






39,908






 






 






 






60,826






 








Goodwill






 






 






371,512






 






 






 






371,512






 








Other assets, noncurrent






 






 






5,043






 






 






 






3,442






 








Total assets






 






$






1,341,377






 






 






$






1,129,906






 








Liabilities and Shareholders’ Equity






 






 






 






 






 






 








Current liabilities:






 






 






 






 






 






 








Accounts payable






 






$






14,168






 






 






$






10,649






 








Accrued expenses and other current liabilities






 






 






77,970






 






 






 






51,885






 








Operating lease liabilities






 






 






5,780






 






 






 






7,794






 








Deferred revenue






 






 






309,604






 






 






 






247,187






 








Total current liabilities






 






 






407,522






 






 






 






317,515






 








Deferred revenue, noncurrent






 






 






32,400






 






 






 






27,060






 








Operating lease liabilities, noncurrent






 






 






6,676






 






 






 






6,182






 








Other liabilities, noncurrent






 






 






7,332






 






 






 






5,623






 








Total liabilities






 






 






453,930






 






 






 






356,380






 








Shareholders’ equity:






 






 






 






 






 






 








Share capital






 






 






335






 






 






 






315






 








Additional paid-in capital






 






 






1,312,833






 






 






 






1,132,224






 








Accumulated other comprehensive income






 






 






5,766






 






 






 






655






 








Accumulated deficit






 






 






(431,487






)






 






 






(359,668






)








Total shareholders’ equity






 






 






887,447






 






 






 






773,526






 








Total liabilities and shareholders’ equity






 






$






1,341,377






 






 






$






1,129,906






 









JFROG LTD.








CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS








(in thousands; unaudited)








 













 



 






 






Three Months Ended

December 31,






 






 






Year Ended

December 31,






 








 






 






2025






 






 






2024






 






 






2025






 






 






2024






 








Cash flows from operating activities:






 






 






 






 






 






 






 






 






 






 






 






 








Net loss






 






$






(15,210






)






 






$






(23,198






)






 






$






(71,819






)






 






$






(69,236






)








Adjustments to reconcile net loss to net cash provided by operating activities:






 






 






 






 






 






 






 






 






 






 






 






 








Depreciation and amortization






 






 






5,572






 






 






 






6,855






 






 






 






24,503






 






 






 






21,460






 








Share-based compensation expense






 






 






40,943






 






 






 






38,769






 






 






 






156,657






 






 






 






131,106






 








Non-cash operating lease expense






 






 






2,542






 






 






 






2,066






 






 






 






8,974






 






 






 






8,389






 








Net amortization of premium or discount on investments






 






 






(1,043






)






 






 






(1,432






)






 






 






(5,240






)






 






 






(6,566






)








Losses (gains) on foreign exchange






 






 






(142






)






 






 






282






 






 






 






(819






)






 






 






642






 








Changes in operating assets and liabilities, net of effects of acquisition:






 






 






 






 






 






 






 






 






 






 






 






 








Accounts receivable






 






 






(15,406






)






 






 






2,270






 






 






 






(29,328






)






 






 






(13,512






)








Prepaid expenses and other assets






 






 






(2,518






)






 






 






(898






)






 






 






(5,491






)






 






 






(7,821






)








Deferred contract acquisition costs






 






 






(8,408






)






 






 






(3,934






)






 






 






(15,069






)






 






 






(12,084






)








Accounts payable






 






 






(3,094






)






 






 






(5,648






)






 






 






3,618






 






 






 






(7,317






)








Accrued expenses and other liabilities






 






 






16,474






 






 






 






5,881






 






 






 






20,775






 






 






 






13,839






 








Operating lease liabilities






 






 






(2,239






)






 






 






(1,900






)






 






 






(8,789






)






 






 






(8,107






)








Deferred revenue






 






 






33,224






 






 






 






30,005






 






 






 






67,757






 






 






 






60,131






 








Net cash provided by operating activities






 






 






50,695






 






 






 






49,118






 






 






 






145,729






 






 






 






110,924






 








Cash flows from investing activities:






 






 






 






 






 






 






 






 






 






 






 






 








Purchases of short-term investments






 






 






(182,650






)






 






 






(134,045






)






 






 






(625,867






)






 






 






(513,591






)








Maturities of short-term investments






 






 






127,979






 






 






 






69,025






 






 






 






477,059






 






 






 






409,914






 








Sales of short-term investments






 






 






—






 






 






 






—






 






 






 






—






 






 






 






98,178






 








Purchases of property and equipment






 






 






(840






)






 






 






(634






)






 






 






(3,460






)






 






 






(3,143






)








Acquisition of business, net of cash acquired






 






 






—






 






 






 






—






 






 






 






—






 






 






 






(156,714






)








Net cash used in investing activities






 






 






(55,511






)






 






 






(65,654






)






 






 






(152,268






)






 






 






(165,356






)








Cash flows from financing activities:






 






 






 






 






 






 






 






 






 






 






 






 








Proceeds from exercise of share options






 






 






2,084






 






 






 






1,548






 






 






 






12,055






 






 






 






10,352






 








Proceeds from employee share purchase plan






 






 






—






 






 






 






—






 






 






 






11,917






 






 






 






8,744






 








Proceeds from employee equity transactions, net of payments to tax authorities and employees






 






 






(62






)






 






 






2,859






 






 






 






7,238






 






 






 






2,135






 








Net cash provided by financing activities






 






 






2,022






 






 






 






4,407






 






 






 






31,210






 






 






 






21,231






 








Effect of exchange rate changes on cash, cash equivalents and restricted cash






 






 






232






 






 






 






(249






)






 






 






1,253






 






 






 






(949






)








Net increase (decrease) in cash, cash equivalents, and restricted cash






 






 






(2,562






)






 






 






(12,378






)






 






 






25,924






 






 






 






(34,150






)








Cash, cash equivalents, and restricted cash—beginning of period






 






 






79,113






 






 






 






63,005






 






 






 






50,627






 






 






 






84,777






 








Cash, cash equivalents, and restricted cash—end of period






 






$






76,551






 






 






$






50,627






 






 






$






76,551






 






 






$






50,627






 








Reconciliation of cash, cash equivalents, and restricted cash within the Condensed Consolidated Balance Sheets to the amounts shown in the Condensed Consolidated Statements of Cash Flows above:






 






 






 






 






 






 






 






 






 






 






 






 








Cash and cash equivalents






 






$






75,840






 






 






$






49,869






 






 






$






75,840






 






 






$






49,869






 








Restricted cash included in prepaid expenses and other current assets






 






 






711






 






 






 






758






 






 






 






711






 






 






 






758






 








Total cash, cash equivalents, and restricted cash






 






$






76,551






 






 






$






50,627






 






 






$






76,551






 






 






$






50,627






 









JFROG LTD.








RECONCILIATION OF GAAP TO NON-GAAP RESULTS








(in thousands except per share data; unaudited)








 













 



 






 






Three Months Ended

December 31,






 






 






Year Ended

December 31,






 








 






 






2025






 






 






2024






 






 






2025






 






 






2024






 








Reconciliation of gross profit and gross margin






 






 






 






 






 






 






 






 






 






 






 






 








GAAP gross profit






 






$






113,136






 






 






$






87,566






 






 






$






408,387






 






 






$






330,188






 








Plus: Share-based compensation expense






 






 






3,938






 






 






 






4,352






 






 






 






16,768






 






 






 






14,555






 








Plus: Acquisition-related costs






 






 






—






 






 






 






—






 






 






 






—






 






 






 






9






 








Plus: Amortization of acquired intangibles






 






 






4,498






 






 






 






4,614






 






 






 






18,111






 






 






 






14,304






 








Non-GAAP gross profit






 






$






121,572






 






 






$






96,532






 






 






$






443,266






 






 






$






359,056






 








GAAP gross margin






 






 






77.9






%






 






 






75.4






%






 






 






76.8






%






 






 






77.1






%








Non-GAAP gross margin






 






 






83.7






%






 






 






83.2






%






 






 






83.3






%






 






 






83.8






%








 






 






 






 






 






 






 






 






 






 






 






 






 








Reconciliation of operating expenses






 






 






 






 






 






 






 






 






 






 






 






 








GAAP research and development






 






$






53,163






 






 






$






44,919






 






 






$






195,089






 






 






$






160,864






 








Less: Share-based compensation expense






 






 






(14,786






)






 






 






(14,739






)






 






 






(58,203






)






 






 






(48,192






)








Less: Acquisition-related costs






 






 






(961






)






 






 






(1,177






)






 






 






(4,413






)






 






 






(3,782






)








Non-GAAP research and development






 






$






37,416






 






 






$






29,003






 






 






$






132,473






 






 






$






108,890






 








 






 






 






 






 






 






 






 






 






 






 






 






 








GAAP sales and marketing






 






$






59,720






 






 






$






49,978






 






 






$






223,932






 






 






$






190,401






 








Less: Share-based compensation expense






 






 






(15,216






)






 






 






(13,844






)






 






 






(55,749






)






 






 






(47,603






)








Less: Acquisition-related costs






 






 






(471






)






 






 






(477






)






 






 






(1,857






)






 






 






(1,087






)








Less: Amortization of acquired intangibles






 






 






(175






)






 






 






(1,299






)






 






 






(2,807






)






 






 






(3,274






)








Non-GAAP sales and marketing






 






$






43,858






 






 






$






34,358






 






 






$






163,519






 






 






$






138,437






 








 






 






 






 






 






 






 






 






 






 






 






 






 








GAAP general and administrative






 






$






21,575






 






 






$






18,084






 






 






$






81,219






 






 






$






70,021






 








Less: Share-based compensation expense






 






 






(7,003






)






 






 






(5,834






)






 






 






(25,937






)






 






 






(20,756






)








Less: Acquisition-related costs






 






 






(19






)






 






 






(24






)






 






 






(68






)






 






 






(880






)








Non-GAAP general and administrative






 






$






14,553






 






 






$






12,226






 






 






$






55,214






 






 






$






48,385






 








 






 






 






 






 






 






 






 






 






 






 






 






 








Reconciliation of operating income (loss) and operating margin






 






 






 






 






 






 






 






 






 






 






 






 








GAAP operating loss






 






$






(21,322






)






 






$






(25,415






)






 






$






(91,853






)






 






$






(91,098






)








Plus: Share-based compensation expense






 






 






40,943






 






 






 






38,769






 






 






 






156,657






 






 






 






131,106






 








Plus: Acquisition-related costs






 






 






1,451






 






 






 






1,678






 






 






 






6,338






 






 






 






5,758






 








Plus: Amortization of acquired intangibles






 






 






4,673






 






 






 






5,913






 






 






 






20,918






 






 






 






17,578






 








Non-GAAP operating income






 






$






25,745






 






 






$






20,945






 






 






$






92,060






 






 






$






63,344






 








GAAP operating margin






 






 






(14.7






)%






 






 






(21.9






)%






 






 






(17.3






)%






 






 






(21.3






)%








Non-GAAP operating margin






 






 






17.7






%






 






 






18.0






%






 






 






17.3






%






 






 






14.8






%








 






 






 






 






 






 






 






 






 






 






 






 






 








Reconciliation of net income (loss)






 






 






 






 






 






 






 






 






 






 






 






 








GAAP net loss






 






$






(15,210






)






 






$






(23,198






)






 






$






(71,819






)






 






$






(69,236






)








Plus: Share-based compensation expense






 






 






40,943






 






 






 






38,769






 






 






 






156,657






 






 






 






131,106






 








Plus: Acquisition-related costs






 






 






1,451






 






 






 






1,678






 






 






 






6,338






 






 






 






5,758






 








Plus: Amortization of acquired intangibles






 






 






4,673






 






 






 






5,913






 






 






 






20,918






 






 






 






17,578






 








Less: Income tax effects






 






 






(4,675






)






 






 






(1,339






)






 






 






(12,114






)






 






 






(10,534






)








Non-GAAP net income






 






$






27,182






 






 






$






21,823






 






 






$






99,980






 






 






$






74,672






 








Net income per share - basic






 






$






0.23






 






 






$






0.19






 






 






$






0.86






 






 






$






0.68






 








Net income per share - diluted






 






$






0.22






 






 






$






0.19






 






 






$






0.82






 






 






$






0.65






 








Shares used in non-GAAP net income per share calculations:






 






 






 






 






 






 






 






 






 






 






 






 








GAAP weighted-average shares used to compute net loss per share - basic and diluted






 






 






118,773






 






 






 






111,985






 






 






 






116,201






 






 






 






109,691






 








Add: Dilutive ordinary share equivalents






 






 






6,644






 






 






 






4,017






 






 






 






5,648






 






 






 






5,576






 








Non-GAAP weighted-average shares used to compute net income per share - diluted






 






 






125,417






 






 






 






116,002






 






 






 






121,849






 






 






 






115,267






 









JFROG LTD.








RECONCILIATION OF GAAP CASH FLOW FROM OPERATING ACTIVITIES TO FREE CASH FLOW AND SUPPPLEMENTAL DISCLOSURE








(in thousands; unaudited)








 













 



 






 






Three Months Ended

December 31,






 






 






Year Ended

December 31,






 








 






 






2025






 






 






2024






 






 






2025






 






 






2024






 








Net cash provided by operating activities






 






$






50,695






 






 






$






49,118






 






 






$






145,729






 






 






$






110,924






 








Less: purchases of property and equipment






 






 






(840






)






 






 






(634






)






 






 






(3,460






)






 






 






(3,143






)








Free cash flow






 






$






49,855






 






 






$






48,484






 






 






$






142,269






 






 






$






107,781






 








Supplemental disclosure:






 






 






 






 






 






 






 






 






 






 






 






 








Key employee holdback payments related to acquisition(1)






 






$






—






 






 






$






—






 






 






$






(5,654






)






 






$






—






 









(1) Payments were made pursuant to a holdback arrangement with key employees of Qwak AI Ltd., which was acquired in July 2024.







 

View source version on businesswire.com: https://www.businesswire.com/news/home/20260212452245/en/
Investor Contact:

Jeff Schreiner

jeffs@jfrog.com


Original: JFrog Announces Fourth Quarter and Fiscal 2025 Results