JFrog

JFrog provides a software supply chain platform centered on Artifactory, a universal binary repository that stores and manages artifacts, containers, packages and AI/ML models across 60+ formats (Docker, Maven, npm, PyPI, Helm and others) through the release pipeline. Additional products include Xray (software composition analysis and vulnerability scanning), Curation (dependency policy enforcement) and Advanced Security. Founded in 2008, JFrog is headquartered in Sunnyvale, California, and offers both SaaS and self-managed deployment.

JFrog describes Artifactory as the system of record for everything in the software supply chain, from traditional binaries, packages, containers and releases to AI/ML models and agent-specific assets such as skills, plugins and primitives. Its capabilities include dependency management, proxying and caching, software governance and lifecycle management, and a Kubernetes, container, model and agent registry. Public registries and AI model hubs can be proxied so that developers do not download directly from the internet.

Deployment is flexible: fully managed SaaS, self-managed, multi-cloud and hybrid are all listed. Automation options include the open-source JFrog CLI, REST APIs for nearly everything and custom plugins with event triggers. Pricing is subscription-based, with a Pro plan for Artifactory on SaaS and self-managed, and an Enterprise X plan that adds federation, automated cleanup and enterprise access control. Security add-ons cover software composition analysis, curation and advanced application security.