Company Description
JFrog Ltd. (NASDAQ: FROG) operates in the information sector within data processing, hosting, and related services, and describes itself as the Liquid Software company and creators of the JFrog Software Supply Chain Platform. The company positions its platform as a unified DevOps, DevSecOps and MLOps solution that serves as a single system of record for how modern software is built, managed, secured, and delivered from developer to production.
According to JFrog, the JFrog Software Supply Chain Platform is designed to power organizations to build, manage, and distribute software quickly and securely, with an emphasis on making software artifacts and releases available, traceable, and tamper-proof. Integrated security capabilities are described as helping to identify, protect, and remediate against threats and vulnerabilities across the software lifecycle. The platform is characterized as hybrid, universal, and multi-cloud, and is offered both as SaaS services across major cloud service providers and as self-hosted deployments.
JFrog refers to its vision as “Liquid Software”, which reflects a mission to enable software to flow continuously from creation to production without friction. In multiple company communications, JFrog states that its platform functions as a single source of truth or system of record for software and, increasingly, for AI and machine learning models. The company reports that millions of users and thousands of customers worldwide, including a majority of the Fortune 100, depend on JFrog solutions to support digital transformation and software delivery practices.
Core platform and product capabilities
JFrog describes its offering as an end-to-end, hybrid, universal DevOps platform that powers and controls the software supply chain. Based on the provided information, its product portfolio includes:
- JFrog Artifactory – referenced as part of the JFrog Platform and as a core component of how software binaries are stored and managed.
- JFrog Pipelines – cited in the company’s product portfolio as part of its DevOps tooling.
- JFrog Xray – used for ongoing scanning and visibility, including model scanning within AI-related offerings.
- JFrog Distribution and JFrog Artifactory Edge – included in the platform portfolio for distributing software artifacts.
- JFrog Mission Control and JFrog Insight – listed as additional platform components.
- JFrog Platform Enterprise+ – referenced as an end-to-end subscription tier within the JFrog Platform.
- JFrog AppTrust – described as a DevGovOps-focused capability for evidence-based software release governance and application delivery governance.
- JFrog Evidence – a capability within the platform that generates a centralized, trusted audit trail with cryptographically signed attestation data attached to release artifacts.
- JFrog AI Catalog – an AI model catalog that extends the platform to discover, govern, and deploy AI and ML models, including models from external providers and open-source repositories.
- JFrog ML – referenced in connection with AI and machine learning capabilities, including Shadow AI Detection and secure model registry functions.
- JFrog Fly – described as an agentic repository that uses AI agents for semantic release management and supports AI-powered software delivery.
- JFrog Runtime Security and JFrog Curation – mentioned as parts of the broader platform and security offering.
Through these components, JFrog presents its platform as addressing DevOps, DevSecOps, MLOps, and what it terms DevGovOps, with a focus on governance, risk, and compliance (GRC) for software and AI artifacts.
Software supply chain, security, and governance focus
Across its communications, JFrog emphasizes its role as a system of record for software supply chains. The company states that its platform helps organizations:
- Build, manage, and distribute software releases with traceability and tamper-resistance.
- Apply integrated security features to detect, protect, and remediate vulnerabilities and threats in software components and AI models.
- Implement evidence-based governance through AppTrust and Evidence, creating a centralized, auditable trail of tests, approvals, and security checks across the software development lifecycle.
- Address governance and compliance requirements by unifying proof from ecosystem partners such as GitHub, ServiceNow, Sonar, and others into a single source of truth for release decisions.
With the introduction of Shadow AI Detection and the AI Catalog, JFrog extends this governance model to the AI supply chain. Shadow AI Detection is described as helping enterprises automatically detect and inventory internal AI models and external API gateways, providing visibility into AI usage and enabling centralized policy enforcement, usage tracking, and compliance with emerging AI regulatory frameworks.
AI and MLOps capabilities
JFrog positions itself as operating at the intersection of DevOps, DevSecOps, and MLOps. The JFrog AI Catalog is presented as a central repository for locating and managing AI models, datasets, and related resources, with capabilities for:
- End-to-end model governance, including tracking model usage and enforcing policies and permissions.
- Continuous security and compliance through scanning and evidence tracking using JFrog Xray, including model lineage visibility.
- Discoverability of models based on tags, projects, and use cases, with detailed model cards and metadata.
- Access to open models, including NVIDIA Nemotron models, and connections to external AI providers such as OpenAI and Anthropic.
- One-click deployment of models to internal runtimes or external providers, while maintaining visibility into deployment and usage patterns.
JFrog also highlights capabilities for building specialized AI agents and integrating AI services into existing software supply chain workflows, with the intent of providing consistent security and governance across traditional software artifacts and AI artifacts.
Platform delivery model and geography
JFrog’s platform is described as hybrid and multi-cloud, available as SaaS across major cloud service providers and as self-hosted deployments. The company’s SEC filings list Israel as the jurisdiction of incorporation and provide a principal office location in Sunnyvale, California. JFrog has stated that it derives a majority of its revenue from Israel and has a presence in the United States, India, and other regions.
JFrog trades on the NASDAQ stock exchange under the symbol FROG. The company files periodic reports and current reports with the U.S. Securities and Exchange Commission, including Form 8-K filings for material events such as quarterly financial results and board appointments.
Customer base and ecosystem
JFrog reports that millions of users and more than 7,000 customers worldwide, including a majority of the Fortune 100, use its solutions. The company frequently references its role as a foundation for enterprise software supply chains in the era of AI, and notes that customers adopt its end-to-end platform subscriptions.
JFrog also highlights an ecosystem of partners and integrations. Examples include:
- Evidence Ecosystem partners for AppTrust, such as GitHub, ServiceNow, Sonar, Akuity, Akto, CoGuard, Dagger, Gradle, NightVision, Shipyard, and Troj.ai, which provide signed attestations and evidence into the JFrog Platform.
- Integrations with GitHub for build provenance, vulnerability remediation, and bidirectional visibility between source code, CI workflows, and binaries.
- Connections to AI providers and technologies such as NVIDIA Nemotron models, NVIDIA NIM microservices, and external APIs from providers like OpenAI and Anthropic.
Through these integrations, JFrog seeks to consolidate software development lifecycle data and AI activity into a single, auditable system of record that supports governance, compliance, and security objectives.
Regulatory and reporting context
As a NASDAQ-listed company, JFrog provides regular financial and operational updates through earnings press releases and SEC filings. For example, a Form 8-K dated November 6, 2025 references the issuance of a press release announcing financial results for the third quarter ended September 30, 2025. Another Form 8-K dated September 19, 2025 reports the appointment of a new director to the company’s board and references the company’s non-employee director compensation policy and indemnification agreements.
In its earnings communications, JFrog discusses metrics such as revenue, cloud revenue, gross margin, operating income or loss, free cash flow, annual recurring revenue (ARR), and net dollar retention rate, as well as the number of customers above specific ARR thresholds. The company also explains its use of non-GAAP financial measures and how they are reconciled to GAAP measures.
Position within data processing and hosting services
Within the broader category of data processing, hosting, and related services, JFrog focuses on software and AI artifact management, security, and governance rather than general-purpose infrastructure. Its platform is centered on binaries, artifacts, and models as the units of software delivery, with capabilities for storage, distribution, security scanning, evidence collection, and policy enforcement.
Investors and analysts evaluating FROG stock can use this context to understand JFrog’s emphasis on the software supply chain, DevOps and DevSecOps workflows, and the governance of AI and traditional software artifacts across hybrid and multi-cloud environments.