{"id":998566,"date":"2026-08-27T09:29:15","date_gmt":"2026-08-27T13:29:15","guid":{"rendered":"https:\/\/www.marketnewsdesk.com\/index.php\/jfrog-introduces-the-software-supply-chain-traffic-controller-one-trusted-path-for-every-software-package\/"},"modified":"2026-08-27T09:29:15","modified_gmt":"2026-08-27T13:29:15","slug":"jfrog-introduces-the-software-supply-chain-traffic-controller-one-trusted-path-for-every-software-package","status":"publish","type":"post","link":"https:\/\/www.marketnewsdesk.com\/index.php\/jfrog-introduces-the-software-supply-chain-traffic-controller-one-trusted-path-for-every-software-package\/","title":{"rendered":"JFrog Introduces the Software Supply Chain Traffic Controller: One Trusted Path for Every Software Package"},"content":{"rendered":"

<\/p>\n

JFrog Introduces the Software Supply Chain Traffic Controller: One Trusted Path for Every Software Package<\/b><\/p>\n

Together with industry-leading SASE providers Zscaler, Cloudflare, and Netskope, JFrog enables organizations to control open source consumption at the network edge, ensuring every package and artifact used by developers, AI agents, or non-engineering employees flows through a trusted, governed software supply chain. No bypass. No exceptions.<\/i><\/p>\n

SUNNYVALE, Calif.–(BUSINESS WIRE<\/a>)–JFrog Ltd<\/a>. (Nasdaq: FROG<\/a>), the Liquid Software company and creators of the JFrog Software Supply Chain Platform<\/a>, the system of record for software artifacts, binaries, and AI assets, today announced new solutions integrated with Zscaler\u2122, Cloudflare, and Netskope \u2013 three of the industry’s leading Secure Access Service Edge (SASE) providers \u2013 to stop malicious packages at the network level before they reach users’ machines. The JFrog Traffic Controller<\/a> universally works with SASE solutions and JFrog Curation to deliver network-layer enforcement that automatically reroutes software package download requests through JFrog Artifactory as the single source of truth \u2013 ensuring all software developers and AI agents can develop safely at speed, while giving the organization a traffic enforcement solution to prevent bypasses.<\/p>\n

This press release features multimedia. View the full release here: https:\/\/www.businesswire.com\/news\/home\/20260827530047\/en\/<\/a><\/p>\n

\"Together<\/p>\n

Together with industry-leading SASE providers Zscaler, Cloudflare, and Netskope, JFrog enables organizations to control open source consumption at the network edge, ensuring every package and artifact used by developers, AI agents, or non-engineering employees flows through a trusted, governed software supply chain. No bypass. No exceptions.<\/p>\n<\/div>\n

JFrog’s 2026 Software Supply Chain Security State of the Union<\/a> showed a 451% surge in malicious packages year over year, reaching over 171,000 unique instances. Yet only 40% of organizations have malicious package detection capabilities in place, and secrets detection is active in just 28% of enterprises. The categories growing fastest in threat volume seem to be the least covered by today\u2019s tooling.<\/p>\n

\n\u201cOpen source has powered software innovation for decades, but in today\u2019s zero-trust world, simply enabling traffic is no longer enough. Organizations need control over what enters their software supply chain, whether it is requested by a developer, an AI agent, or an automated tool. The answer is not another security alert or another gate that disrupts the developer workflow. It is a universal control point that ensures every package flows through one trusted system of record, where policy can be governed and enforced,\u201d said Shlomi Ben Haim, Co-Founder and CEO, JFrog. \u201cJFrog Traffic Controller extends that enforcement to the network edge, creating one trusted path for software consumption with no exceptions, while developers and AI agents continue working without disruption. We\u2019re thrilled to partner with the world\u2019s leading security companies to bring this vision to our customers while staying true to JFrog\u2019s universal philosophy \u2013 empowering our customers with a freedom of choice without compromising control, security, or speed.\u201d<\/p>\n

The Threat and the AI Governance Gaps are Getting Worse<\/b><\/p>\n

\nToday’s threat extends well beyond known malicious packages. AI coding agents like Claude Code, Cursor, Copilot, and Kiro now run directly on developer machines, autonomously pulling dependencies, installing libraries, and invoking build processes with little to no review. Agents \u2013 like developers \u2013 don’t always follow proxy configurations, consult approved package lists, or pause before fetching packages from the default public registries. Therefore, each agent session is a potential unmonitored entry point into the organization’s software supply chain.<\/p>\n

\nThis risk is amplified as frontier AI models further accelerate attackers’ ability to discover and exploit vulnerabilities. The window between disclosure and active exploitation has shrunk to mere hours, making comprehensive visibility into every software component entering the organization the only reliable way to answer, “are we exposed?” before attackers already know the answer.<\/p>\n

\nGartner recognized these increasing stakes \u2013 citing software supply chains as one of \u201c<\/i>four critical and unpredictable threats where attackers hold a significant advantage to successfully exploit weaknesses in targeted organizations<\/i><\/a>.\u201d<\/i> The coverage gap is real \u2013 not just theoretical \u2013 and it\u2019s structural. AI coding agents, autonomous build tools, and non-engineering employees using AI-powered applications often download dependencies directly from public registries, bypassing every pipeline-level control and leaving no audit trail.<\/p>\n

Reroute, Don’t Block: How JFrog Closes the Governance Gap<\/b><\/p>\n

\nThe JFrog Software Supply Chain Platform<\/a> helps stop malicious and unwanted packages at the network layer and creates a complete, auditable record of every package entering the organization across companies using Zscaler, Cloudflare, and Netskope simultaneously. Rather than simply blocking out-of-policy requests, JFrog Traffic Controller transparently reroutes outbound package downloads through JFrog Artifactory, where JFrog Curation inspects each package against the configured security, license, and quality policies before it enters the organization. Compliant packages are delivered without interruption while malicious ones are stopped and, when available, a safe approved version is served automatically.<\/p>\n

\n\u201cBy partnering with Cloudflare, Netskope and Zscaler, our Traffic Controller works natively with the security infrastructure our customers already use,\u201d said Gal Marder, Chief Strategy Officer, JFrog. \u201cWe’re making it possible for the entire software security ecosystem to enforce the same standard with zero friction: every package needs to be curated before first use, every transaction on record, no exceptions. That is how the industry builds a supply chain it can actually trust.”<\/p>\n

When the Pipeline Is Secure, but the Perimeter Is Not<\/b><\/p>\n

\nAdyen, a global financial technology platform enabling businesses to accept, process, and settle payments across online, mobile, and in-store channels, consolidated their software supply chain on the JFrog Platform to help scale their enterprise-wide DevSecOps practices. Adyen uses JFrog Curation as a real-time firewall to block malicious open-source packages from entering their software pipelines. This allows developers to safely pull software components without introducing vulnerabilities, while experiencing zero disruption to their workflow.<\/p>\n

\n\u201cJFrog Curation provides a firewall for open-source packages. You instill policies that defend the organization, but the goal isn’t to say \u2018no\u2019,\u201d said Supun Vidana Pathiranage, DevSecOps Specialist, at Adyen. \u201cIt’s about how we can help developers continue their work without disrupting their workflow. We enable development; we don’t block it.”<\/p>\n

Initial Gateway Security Solutions Supported<\/b><\/p>\n

\nThe JFrog Traffic Controller solution is available immediately through JFrog Curation, supporting:<\/p>\n