Operations | Monitoring | ITSM | DevOps | Cloud

Protect your organization from the next software package hijacking with JFrog Curation! Learn how to create an operational risk policy in JFrog Curation that flags immature package versions. This walkthrough reviews the available operational risk conditions, explains why brand-new or outdated releases can carry supply chain risk, and shows how a Dry Run action lets you measure a policy's impact on developers before you switch it to Block.

Protect your proprietary code with JFrog Curation! Learn how to create a legal risk policy that blocks packages with licenses you don’t want developers using. In this demo, we build a policy for the GNU AGPL license, add a waiver for a package covered by a commercial license, and configure how waiver requests are handled. Read more about it in the JFrog Docs.

Learn how to configure the JFrog Curation service for the first time. This video walks through each setting on the Curation General page, including turning on Curation, connecting package types, compliant version selection and notifications, and explains what each one does. Creating Curation policies and advanced coverage are covered in separate videos. Read more about it in JFrog Docs.

Learn how to safeguard your development environment in VS Code by ensuring your agents only interact with authorized, secure MCP servers.

Learn how to safeguard your development environment in Cursor by ensuring your agents only interact with authorized, secure MCP servers.

AI agents now write, review and ship code, and our supply-chain security can't tell how that code was made. A green build and a clean scan don't tell you which model or tools the agent used, whether it had your security guidelines, or whether a human actually reviewed the change. In this talk I introduce Agentic Process Evidence, a proposed open community standard. It records the AI development process as structured, signed evidence that is attached to the commit and linked back to the full agent session logs, so release policies can enforce it automatically as policy as code.

JFrog is bringing software supply chain governance to AWS Kiro. Operating as a power plugin within Kiro, JFrog delivers package safety, agentic access to the JFrog platform, and the JFrog AI Catalog. With simple setup, AI agents make supply chain aware decisions right inside the IDE, ensuring dependencies come directly from Artifactory rather than unverified public registries.

JFrog is bringing software supply chain governance to Devin. The plugin bundles JFrog Platform Skills and registers the JFrog remote MCP server, so Devin resolves dependencies, MCP servers, and skills only from governed sources, authenticated once, with provenance preserved for every session.

JFrog’s Package Traffic Controller (PTC) intercepts an organization’s public package traffic at the network layer and routes it through JFrog, so JFrog Curation policies and audit logging apply to every intercepted install without changing how developers work.

AI agents are making real-time decisions inside enterprises right now; pulling code, accessing tools, executing tasks. But most businesses have zero visibility into what those agents are actually using. In this interview on @ausbizTV, Sunny Rao, SVP APAC at JFrog, explains why the governance gap is one of the biggest risks facing enterprises today; and how JFrog and NVIDIA are building the trust layer to fix it.