JFrog

JFrog is a leading DevOps platform company best known for Artifactory, the world's most widely used universal binary repository manager. JFrog's platform addresses the entire software supply chain, from source code through build artifacts to deployment, providing the infrastructure needed to store, manage, and secure software packages and dependencies at enterprise scale.

JFrog Artifactory is the cornerstone of the platform, providing a universal artifact repository that supports virtually every package format including Docker, Helm, Maven, Gradle, npm, PyPI, NuGet, Go, Conan, RubyGems, Debian, RPM, and many others. By centralizing all binary artifacts in a single repository with a consistent management interface, teams eliminate dependency on multiple package registries, gain full visibility into their software composition, and can enforce policies across all artifact types uniformly.

The JFrog platform is designed around the concept of the software supply chain. The software supply chain encompasses all the components, dependencies, and artifacts that go into building and deploying software, from open source libraries to proprietary packages to container images. JFrog provides the tools to manage, secure, and trace every step of this supply chain, enabling organizations to understand exactly what software they are running and whether it is free from vulnerabilities, malware, and license compliance issues.

JFrog Xray is the platform's security and compliance scanning component. Xray analyzes all artifacts stored in Artifactory for known vulnerabilities (CVEs) from multiple security databases, open source license compliance issues, and exposed secrets. The recursive scanning capability analyzes not just the top-level artifact but all its transitive dependencies, providing a complete picture of the security and compliance posture of every build artifact. Integration with CI/CD pipelines enables blocking the promotion of builds that contain critical vulnerabilities.

JFrog Distribution provides the infrastructure for distributing software to edge nodes, IoT devices, and remote locations at scale. Using the Release Bundle mechanism, organizations can define curated sets of artifacts and their metadata that should be distributed together, ensuring consistency between what was tested and what is deployed to production.

JFrog Connect is the edge platform for managing IoT and remote device fleets, providing over-the-air update capabilities, remote access, and monitoring for devices running JFrog Edge software.

JFrog Pipelines is the CI/CD automation component that provides pipeline-as-code capabilities with native integration with Artifactory and Xray. Pipelines can be triggered by repository events and can orchestrate complex multi-stage, multi-cloud build, test, and deployment workflows.

The JFrog Platform is available as a cloud service (JFrog Cloud) on AWS, Azure, and Google Cloud, as a self-hosted installation, and as a hybrid deployment combining both models. JFrog is used by thousands of organizations to manage billions of artifact downloads daily.