JFrog Ltd

About the manufacturer

JFrog Ltd is the Israeli company that develops JFrog Artifactory and the JFrog Software Supply Chain Platform, a platform for artifact management and software supply chain security.

Founded in 2008 by Shlomi Ben Haim, Yoav Landman and Frederic Simon, it keeps its corporate headquarters in Sunnyvale, California, and its research and development center in Netanya, Israel, with additional offices in France, Spain, India and China. It is a publicly traded company listed on NASDAQ under the ticker FROG since September 2020. According to JFrog itself, the platform serves approximately 6,600 organizations worldwide, including a majority of the Fortune 100.

The technology starts a simple principle: treating the binary as the unit of control across the development lifecycle. Artifactory works as a universal repository with native support for over 50 package types — Maven, npm, Docker, PyPI, NuGet, Go, Helm, Debian, RPM and Terraform, among others — and also as a machine learning model registry. On top of that core, the analysis modules operate inside the repository itself, generating SBOMs in CycloneDX and SPDX and blocking out-of-policy components before release promotion.

JFrog's main product lines are:

• JFrog Artifactory — universal artifact repository and model registry, available as a JFrog-managed service or installed on the customer's own infrastructure.
• JFrog Xray — software composition analysis that surfaces vulnerabilities, malicious packages and license risk across stored artifacts.
• JFrog Advanced Security and JFrog Curation — contextual CVE analysis, leaked secrets detection, SAST, IaC scanning and blocking of out-of-policy packages at intake.
• JFrog ML — an MLOps platform for training, deploying, serving and monitoring machine learning and GenAI models, with a Feature Store and an Inference Lake.
• JFrog Connect — IoT and edge device management, with over-the-air updates and remote access to fleets of Linux equipment in the field.
• JFrog AppTrust and JFrog AI Catalog — per-application risk governance and control over models, MCP servers and AI agent skills.

On compliance, JFrog holds ISO 27001 certification and a SOC 2 Type II audit renewed annually, and its platform supports supply chain standards such as SLSA, VEX, NIST SSDF and the European Cyber Resilience Act. Cloud operation is available across roughly 30 locations spread over AWS, Microsoft Azure and Google Cloud, including two São Paulo regions — one on AWS and one on Azure — allowing artifacts to be hosted on Brazilian territory.

OSB Software is an official JFrog Ltd partner in Brazil and supplies 100% genuine licenses across the portfolio, with Brazilian invoicing, local contracting in Portuguese and consultative support in Portuguese to size licensing to each company's operation.