{"id":18508,"date":"2026-09-08T03:19:56","date_gmt":"2026-09-08T03:19:56","guid":{"rendered":"https:\/\/techtrendfeed.com\/?p=18508"},"modified":"2026-09-08T03:19:56","modified_gmt":"2026-09-08T03:19:56","slug":"jfrog-delivers-devgovops-at-scale-steady-compliance-for-the-ai-period-software-program-provide-chain","status":"publish","type":"post","link":"https:\/\/techtrendfeed.com\/?p=18508","title":{"rendered":"JFrog Delivers DevGovOps at Scale: Steady Compliance for the AI-Period Software program Provide Chain\u00a0"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span style=\"font-weight: 400;\">At its SwampIUP 2026 occasion in New York Metropolis, JFrog has unveiled <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/devgovops\"><span style=\"font-weight: 400;\">DevGovOps for the AI-era<\/span><\/a><span style=\"font-weight: 400;\"> \u2013 a brand new class of capabilities in <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/apptrust\/\">JFrog AppTrust<\/a><span style=\"font-weight: 400;\"> that automates governance throughout the software program provide chain to assist organizations hold tempo with agent-driven growth and rising regulatory calls for.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u201cAI is altering how software program will get constructed and shipped. Autonomous brokers are actually first-class members of our prospects\u2019 growth groups, committing code and delivery releases at machine pace. The problem is \u2013 governance and compliance nonetheless run on human timelines. The truth is: governance can\u2019t be one thing you do after the very fact, in a spreadsheet or a quarterly audit \u2013 it should be constructed into the discharge itself,\u201d stated Shlomi Ben Haim, Co-Founder and CEO, JFrog. \u201cWith JFrog AppTrust, compliance enforcement is automated. It\u2019s not about insurance policies and code. It\u2019s about ensuring governance retains tempo together with your growth velocity \u2013 whether or not your code comes from a human or an agent. That\u2019s the subsequent evolution of DevGovOps.\u201d<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Enterprises constructing AI factories face a elementary operational problem: autonomous brokers and AI-assisted builders can plan, code, check, and deploy in hours. Handbook governance processes take weeks. Moreover, regulatory necessities from the <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/ecb-ai-cyber-directive\/?_gl=1*39l3as*_up*MQ..*_ga*NDcwMTEzNTQuMTc4NjY5NDYyMw..*_ga_SQ1NR9VTFJ*czE3ODY2OTQ2MjIkbzEkZzAkdDE3ODY2OTQ2MjIkajYwJGwwJGgxMDQ5NDYxOTYw\"><span style=\"font-weight: 400;\">ECB AI Cyber Directive<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/jfrog-devgovops-and-slsa-compliance\/?_gl=1*xt2rl9*_up*MQ..*_ga*NDcwMTEzNTQuMTc4NjY5NDYyMw..*_ga_SQ1NR9VTFJ*czE3ODY2OTQ2MjIkbzEkZzAkdDE3ODY2OTQ2MjIkajYwJGwwJGgxMDQ5NDYxOTYw\"><span style=\"font-weight: 400;\">EU Cyber Resilience Act (CRA)<\/span><\/a><span style=\"font-weight: 400;\">, NIST SSDF, and FedRAMP mandate that organizations show lively compliance for each supported software program model or face steep fines and restrictions. For instance, CRA fines can attain as much as \u20ac15 million or 2.5% of worldwide annual turnover. Individually, beneath the <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/nis2-directive\"><span style=\"font-weight: 400;\">EU\u2019s NIS2 Directive<\/span><\/a><span style=\"font-weight: 400;\">, administration our bodies, together with named executives, can face private accountability, as much as short-term bans from managerial roles.\u00a0\u00a0<\/span><\/p>\n<p><b>The 4 Dimensions of DevGovOps at Scale: Codify, Attest, Implement, Monitor<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The brand new JFrog AppTrust capabilities embed governance into the software program provide chain throughout DevGovOps\u2019s 4 steady pillars \u2013 Codify, Attest, Implement and Monitor \u2013 making governance an always-on property of the infrastructure, not a checkpoint utilized after the very fact.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Codify: Automated coverage enforcement. <\/b><span style=\"font-weight: 400;\">For customized compliance insurance policies, JFrog\u2019s <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/how-to-validate-policy-as-code\/\"><span style=\"font-weight: 400;\">AI-assisted Coverage-as-Code Playground<\/span><\/a><span style=\"font-weight: 400;\"> lets safety groups write and validate governance guidelines in plain English \u2013 <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/governance-that-ships-embedding-policy-as-code-into-your-system-of-record\/\"><span style=\"font-weight: 400;\">with no need Rego experience<\/span><\/a><span style=\"font-weight: 400;\"> \u2013 then check in opposition to actual utility variations earlier than deployment. Validated insurance policies will be saved as reusable templates which can be then enforced constantly and deterministically throughout the group.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Attest: Computerized evidence-based seize. <\/b><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/prompt-to-release-traceability\/\"><span style=\"font-weight: 400;\">Immediate-to-Launch Traceability<\/span><\/a><span style=\"font-weight: 400;\"> collects approvals, builds, scans, and promotions with no handbook logging step, bridging the hole created by a scarcity of provenance in AI brokers. It connects the agent\u2019s intent to the artifact that was shipped and delivers a full audit path for each agent resolution and consumed asset throughout the software program lifecycle.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Implement: Coverage guardrails at machine pace.<\/b><span style=\"font-weight: 400;\"> For widespread compliance necessities, JFrog affords new <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/jfrog-apptrust-enforces-compliance\"><span style=\"font-weight: 400;\">Out-of-the-Field (OOTB) Compliance<\/span><\/a><span style=\"font-weight: 400;\"> Frameworks with pre-built guidelines aligned with regulatory requirements and mechanically enforced with one click on. Templates for CRA and NIST SSDF can be found now, with further requirements coming quickly.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Monitor: DevGovOps that doesn\u2019t cease on the launch gate. <\/b><span style=\"font-weight: 400;\">With Publish-Launch Governance, JFrog AppTrust extends compliance visibility with steady monitoring of each lively manufacturing model inside its help window, so organizations can show compliance and observe newly launched safety dangers at any time limit.<\/span><b>\u00a0<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/apptrust\/\"><span style=\"font-weight: 400;\">JFrog AppTrust <\/span><\/a><span style=\"font-weight: 400;\">will deliver <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"http:\/\/jfrog.com\/devgovops\"><span style=\"font-weight: 400;\">DevGovOps at scale<\/span><\/a><span style=\"font-weight: 400;\"> capabilities to JFrog Platform prospects in Q3 2026. To study extra about JFrog AppTrust and DevGovOps take a look at this <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/jfrog.com\/blog\/devgovops-to-prove-compliance\/\"><span style=\"font-weight: 400;\">weblog<\/span><\/a><span style=\"font-weight: 400;\"> or <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/leap.jfrog.com\/2026-swampup-hands-on-look.html\"><span style=\"font-weight: 400;\">register<\/span><\/a><span style=\"font-weight: 400;\"> for the <\/span><i><span style=\"font-weight: 400;\">\u201cRegain Management Over Compliance\u201d <\/span><\/i><span style=\"font-weight: 400;\">webinar on Thursday, Oct. 1 at 11 AM PT\/2 PM ET.\u00a0<\/span><\/p>\n<p>\u00a0<\/p>\n<div class=\"sdt-author-box-section\">\n<div class=\"sdt-author-box\">\n<div class=\"sdt-author-box-photo\"><img loading=\"lazy\" alt=\"SD Times Newswire\" width=\"80\" height=\"80\" src=\"https:\/\/secure.gravatar.com\/avatar\/5ca5c55ed3ff1f355e6ba1aaf7a6d214bab2c54dd2fc8e6fb6c68ea43b07be2b?s=80&amp;d=mm&amp;r=g\" decoding=\"async\" class=\"lazyload\" data-eio-rwidth=\"80\" data-eio-rheight=\"80\"\/><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/secure.gravatar.com\/avatar\/5ca5c55ed3ff1f355e6ba1aaf7a6d214bab2c54dd2fc8e6fb6c68ea43b07be2b?s=80&amp;d=mm&amp;r=g\" alt=\"SD Times Newswire\" width=\"80\" height=\"80\" data-eio=\"l\"\/><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>At its SwampIUP 2026 occasion in New York Metropolis, JFrog has unveiled DevGovOps for the AI-era \u2013 a brand new class of capabilities in JFrog AppTrust that automates governance throughout the software program provide chain to assist organizations hold tempo with agent-driven growth and rising regulatory calls for.\u00a0 \u201cAI is altering how software program will [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":18510,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[10472,241,278,6401,4611,10471,10470,1798,802,240],"class_list":["post-18508","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","tag-aiera","tag-chain","tag-compliance","tag-continuous","tag-delivers","tag-devgovops","tag-jfrog","tag-scale","tag-software","tag-supply"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18508"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18508\/revisions"}],"predecessor-version":[{"id":18509,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18508\/revisions\/18509"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/18510"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}